*.ovam.be

- Openbare Vlaamse Afvalstoffenmaatschappij -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 60:43:65:59:a2:8a:4f:cc:ae:47:4b:02 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Openbare Vlaamse Afvalstoffenmaatschappij

Organization: Openbare Vlaamse Afvalstoffenmaatschappij
State / Province: Antwerpen
Locality: Mechelen
Country: BE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 60:43:65:59:a2:8a:4f:cc:ae:47:4b:02
Serial Number (int): 29792037585250560668047198978
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d1:8e:1e:84:19:8c:0a:09:16:10:17:9a:c0:52:5c:ab:49:30:fd:c2
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): de:49:b8:1d:d1:3c:fb:f0:7d:59:90:15:94:70:95:b4:c6:8a:a1:c8
Fingerprint (sha256): 14:49:09:03:68:2e:9b:b2:59:2c:37:38:6a:ce:6c:41:73:19:86:60:f3:9a:ec:c8:98:af:c4:a7:25:94:ac:0b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.ovam.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ovam.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ovam.be
ovam.be

Other certificates including the domain name ovam.be

(limited to 100 certificates)
*.dev.aws.ovam.be
jaarverslag.ovam.be
ovam.be
jaarverslag.ovam.be
ovam.be
*.tst.aws.ovam.be
*.uat.aws.ovam.be
*.uat.aws.ovam.be
ovam.be
*.ovam.be
K3000.ovam.be
jaarverslag.ovam.be
*.tst.aws.ovam.be
ovam.be
jaarverslag.ovam.be
ovam.be
*.uat.aws.ovam.be
jaarverslag.ovam.be
ovam.be
*.prd.aws.ovam.be
*.uat.aws.ovam.be
*.ovam.be
*.uat.aws.ovam.be
*.lt.aws.ovam.be
ovam.be
ovam.be
ovam.be
ovam.be
fluvius.ovam.be
*.lt.aws.ovam.be
*.uat.aws.ovam.be
*.tst.aws.ovam.be
ovam.be
ovam.be
*.tst.aws.ovam.be
ovam.be
*.ovam.be
jaarverslag.ovam.be
*.prd.aws.ovam.be
jaarverslag.ovam.be
services.ovam.be
*.lt.aws.ovam.be
*.lt.aws.ovam.be
*.dev.aws.ovam.be
ovam.be
*.ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
ovam.be
ovam.be
*.prd.aws.ovam.be
ovam.be
*.tst.aws.ovam.be
*.tst.aws.ovam.be
*.uat.aws.ovam.be
*.ovam.be
*.uat.aws.ovam.be
*.dev.aws.ovam.be
www.ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
*.dev.aws.ovam.be
*.ovamad.ovam.be
*.ovam.be
*.dev.aws.ovam.be
*.ovam.be
*.dev.aws.ovam.be
ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
*.ovam.be
ovam.be
*.prd.aws.ovam.be
www.ovam.be
*.prd.aws.ovam.be
ovam.be

Certificate

The complete raw certificate details for *.ovam.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MvV13wuDdUVftnIc0uC
2QT5uImzWyc4TKk02DgfihWkBCEivuI5BwYgO2UGDAzA8mbRj+FufePbcOrgJblC
p3ag8pay4q6kELj0AM6NZyzioCEz/c6FQRUw5BCa2elqv2Hiplc4mFu1oZKlxrkl
DAewmOPvRHVploOJdX5h4dGSwQOkxAwFqpieIm7mOKHv9i4VBbr4KxEyOu2ZMdF6
1ueqH50228RGdLnzWJY16vdHy3Y/cVDX1nBq/+8usehaCOv3HiVC7DAaDPCooBTx
vj+t7Vtg7+/WTXFqISQsi7Xd2DCgekzQAzqFaNtT8su/BLCnWz2KsixhbB5zDYPD
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29792037585250560668047198978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 15:11:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 15:11:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mechelen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Openbare Vlaamse Afvalstoffenmaatschappij'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ovam.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28882848474447127664568388766804885872155252150842799145332597191918806767122639783380753657508869438095827686617410159655041566211502931198367425912114123781677733444861853708313518936601386936335986446685801078222329880507612214321669548364277702060867637783574185201458841561994501643370150142167332859348650176862393427189069508062480616038019114711450972639361436112769390161623563447021455992965181394865037961536769642480531430725983175196728202700175615161921794688254519902324188515546027101077743345190737219872363107246468392789341680537269505419313337683015473506624861967167317863933697113871235969958709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovam.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovam.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d18e1e84198c0a091610179ac0525cab4930fdc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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