sophie-cnhi-dev.stefanini.com

- Stefanini Inc -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5e:b6:a1:75:26:84:89:97:39:64:c4:1e was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stefanini Inc

Organization: Stefanini Inc
State / Province: Michigan
Locality: Southfield
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:b6:a1:75:26:84:89:97:39:64:c4:1e
Serial Number (int): 29312377884424592159785927710
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 6f:9f:f0:83:55:de:a3:7b:18:3c:87:e0:1c:ce:f2:a0:55:00:80:8a
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 1a:e5:f2:ff:21:02:a2:20:83:af:22:12:0f:c5:a6:08:6e:51:af:e2
Fingerprint (sha256): 0f:75:9c:8a:0d:f6:93:0f:23:7a:26:9a:e8:39:c9:18:af:92:d2:0f:a3:4b:2f:34:bb:4d:cf:07:6d:f9:8f:c7

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate sophie-cnhi-dev.stefanini.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sophie-cnhi-dev.stefanini.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sophie-cnhi-dev.stefanini.com

Other certificates including the domain name stefanini.com

(limited to 100 certificates)
aodctraining.stefanini.com
goodman-sd.stefanini.com
evoqua-sd-dev.stefanini.com
customurl.konviva.com.br
genchat.stefanini.com
essdbo.stefanini.com
lss-servicedesk.stefanini.com
essd.stefanini.com
lss-servicedesk.stefanini.com
essd.stefanini.com
chat-usapi.stefanini.com
otrs.stefanini.com
puratos-sd.stefanini.com
novaintranet.stefanini.com
nodavpn.stefanini.com
customurl.konviva.com.br
sophie-jcrew-dev.stefanini.com
goodman-reporting.stefanini.com
dl.stefanini.com
sophie-infineum.stefanini.com
sophie-devry.stefanini.com
realtime.stefanini.com
goodman-sd.stefanini.com
essd.stefanini.com
webmail.techteam.com
interno.stefanini.com
customurl.konviva.com.br
sophie-loblaw.stefanini.com
sip.stefanini.com
stefanini-acd-us.stefanini.com
go.stefanini.com
workplace.stefanini.com
customurl.konviva.com.br
eapps.stefanini.com
alex-alcoa-dev.stefanini.com
go.stefanini.com
sophie-show.stefanini.com
customurl.konviva.com.br
eapp.stefanini.com
customurl.konviva.com.br
sophie-cnhi.stefanini.com
lss-dev.stefanini.com
sophie-cnhi-dev.stefanini.com
woodward.stefanini.com
conteudos.stefanini.com
analytics.stefanini.com
epassword.stefanini.com
grc.stefanini.com
novaintranet.stefanini.com
chat-us3.stefanini.com
customurl.konviva.com.br
analytics.stefanini.com
customurl.konviva.com.br
materiais.stefanini.com
customurl.konviva.com.br
epassword.stefanini.com
nam-wlc.stefanini.com
webmail.techteam.com
evoqua-sd.stefanini.com
sophie-demo.stefanini.com
swgservicedesk.stefanini.com
news.stefanini.com
sophiedemoinsurance.app.stefanini.com
customurl.konviva.com.br
Kit-cnhi-dev.stefanini.com
essd.stefanini.com
eportal.stefanini.com
eportal.stefanini.com
swgservicedeskdev.stefanini.com
servicedesk.stefanini.com
1ssl.konviva.com.br
customurl.konviva.com.br
*.stefanini.com
servicedeskportal.stefanini.com
emkt.stefanini.com
essd.stefanini.com
customurl.konviva.com.br
infineumdev.stefanini.com
*.stefanini.com
customurl.konviva.com.br
sophie-meritor-dev.stefanini.com
lss-supportauto.stefanini.com
sophie-devry-dev.stefanini.com
edata.stefanini.com
lss-reporting.stefanini.com
next.stefanini.com
sophie-adtalem-dev.stefanini.com
customurl.konviva.com.br
lss-servicedesk-eu.stefanini.com
sophie-solvay-dev.stefanini.com
sdbot-infineum.stefanini.com
sophie-devry-dev.stefanini.com
infineumcatalog.stefanini.com
mkt.stefanini.com
marketing.stefanini.com
wwe-nam.stefanini.com
chat-eu2.stefanini.com
lss-supportauto.stefanini.com
infineum-proc-dev.stefanini.com
trace.stefanini.com

Certificate

The complete raw certificate details for sophie-cnhi-dev.stefanini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp0xneN8nHs29DnPbirS
UrKCUONoOym9OXzD/lWihM3qMeD3BTfL32xNEDjP1+fx9Hpjf754d6FKLHgFHLRL
Of0n9MoCeVKCEQawOvrGXpwXYiiY7kYPQ3zpDlkkNVM58cgEGTkw+kCyLRWJEwL+
Tr0vSaJuHw4NAQHAYXLF81t5k3j5iNQ439fD0X+9X6xCwzIhxcirAYctRMwxB7jL
Ai2v/I06bNXbdl2uwaBuJuJN52jIkZZ9303HOTKOlQnlJL4UzNQZB/ezcl0tDxAE
cglwOKwXaDRQdDf5CTTpyV0sLOdAdLuQ839GJWTMgDVHdB3gBY0ASGZ2n6QiDAxo
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29312377884424592159785927710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 20:06:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 20:06:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stefanini Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sophie-cnhi-dev.stefanini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24567746322837973557936113129072139952920853152672437997254526377410298555229962681107833485548196756439559601924656855592926651673651367140792582558414531388675285795806497803137477681199370956570060868032181395127319943314623618749242923725539411686695844558084886959289555376326014360398356586099235095523202726589965814710813481879559046966985854853898640920595036622741593479715271553415133121664607990431805486045183492538704137983380362694087115986186266865169037066699665118423775917835816631616230186453671678303151334426481754203970637610975896610325951977652435032106157812941882689282642415638099134277653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophie-cnhi-dev.stefanini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f9ff08355dea37b183c87e01ccef2a05500808a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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