*.rdek.bc.ca

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 6c:e4:b6:9b:73:36:72:f4:84:a8:8e:f4 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.rdek.bc.ca

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:e4:b6:9b:73:36:72:f4:84:a8:8e:f4
Serial Number (int): 33700878485824565932146069236
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d7:73:63:12:9e:f3:b3:5a:a0:56:a8:13:3e:4c:98:fc:4d:bf:97:28
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 7b:38:53:72:84:78:8e:db:63:ec:d4:07:41:27:b9:5e:d6:91:54:fd
Fingerprint (sha256): 13:e4:a4:5e:df:8d:bf:67:61:7d:cc:a4:74:f4:41:8f:18:8e:f6:7c:d4:ea:76:f9:76:7e:0b:a2:b9:4d:87:7c

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.rdek.bc.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rdek.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rdek.bc.ca
rdek.bc.ca

Other certificates including the domain name rdek.bc.ca

(limited to 100 certificates)
*.rdek.bc.ca
secure.rdek.bc.ca
rdek.bc.ca
secure.rdek.bc.ca
secure.rdek.bc.ca
engage.rdek.bc.ca
helpdesk.rdek.bc.ca
secure.rdek.bc.ca
*.rdek.bc.ca
*.rdek.bc.ca
engage.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
devopshelpdesk.hcss.com
sdp.tianjinjuilliard.edu.cn
rdek.bc.ca
*.rdek.bc.ca
mail.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
mail.rdek.bc.ca
secure.rdek.bc.ca
rdek.bc.ca
engage.rdek.bc.ca
*.rdek.bc.ca
rdek.bc.ca
*.rdek.bc.ca
*.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
engage.rdek.bc.ca
commissions.rdek.bc.ca
rdek.bc.ca
rdek.bc.ca

Certificate

The complete raw certificate details for *.rdek.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfkR+KN7VTE0g5pPUCp8
vrlY0GPAwG5+Upd+3GFEPFTNm96fDiAiOac3P+avsy3IvKdLbUpb7vHtcqiLhY9v
NlfGsxIJZtamGk9bH8juZGsiSNShr+nR/6ffU3GK7NrPIGEWWGsm1kYdf+AKFuuS
OqFSw2BaU4IweDBwleNK8Asar4k99PVcLhzjOrKp8hyWSU/N+TDIYen5SPLDnrm+
koPBpJto9lnSZS55pbbAeNbbWJ4VSXizbFbMcIKkCpbjNloEIkyM8FJZyqfTm2B2
3/Ves+f81eU24YQyv0O13ArhKFrxVv8RTyXKaOG9ETgaaf7jUFRZ3RsMgcpgEci/
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33700878485824565932146069236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 16:52:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 16:52:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rdek.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26001673611352633429393980957103950578974107092194612955979491381182987262521014028817048784098100565869221485543796387161557802991198285377211521480464657986691632870696698353283075055576045623143218285951199565443102187664213518231340325399028836131557734732672447080673824943744908500757051443854105486612815378600290493056928035108384683574555564993983690778072627775620283831426189635104778408196259521177346334818229197927312582668273504881924467747960829741205607594164077815409672651908652676144400674377621488674269473064836604317248056453617817115721344845715151869201384965585256371710532254806847024316327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rdek.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdek.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d77363129ef3b35aa056a8133e4c98fc4dbf9728
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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