sts.inmarsat.com

- Inmarsat Global Limited -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:2c:a4:1d:e7:e1:c5:0b:9c:95:a9:c0 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Inmarsat Global Limited

Organization: Inmarsat Global Limited
State / Province: London
Locality: London
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:2c:a4:1d:e7:e1:c5:0b:9c:95:a9:c0
Serial Number (int): 5315212922793531357584009664
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 10:50:a6:b6:a2:3e:d3:d1:3e:2d:c8:a9:e7:0c:7e:f3:dc:b4:b3:22
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): f0:54:16:a5:0f:fb:d3:3b:a7:86:56:a3:e8:24:ca:35:e2:de:d8:85
Fingerprint (sha256): 14:68:2a:a1:8f:5a:3d:ca:2f:a5:59:59:fd:05:58:f4:c3:ad:08:70:5e:7f:ad:fe:32:e9:0d:84:5f:58:57:5c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate sts.inmarsat.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.inmarsat.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.inmarsat.com

Other certificates including the domain name inmarsat.com

(limited to 100 certificates)
api.inmarsat.com
sdm.dev.inmarsat.com
live.bganbss.inmarsat.com
esasselfservice.inmarsat.com
dxcb.bp.inmarsat.com
*.selfservice.inmarsat.com
pdw.inmarsat.com
apc-dht.bganbss.inmarsat.com
apc-prod.bganbss.inmarsat.com
docserve.inmarsat.com
regulatory.gx.inmarsat.com
api-intg.inmarsat.com
teamspace.inmarsat.com
bugs.dev.inmarsat.com
identity.inmarsat.com
regulatory.gx.inmarsat.com
sdm.dev.inmarsat.com
esas.inmarsat.com
www2.inmarsat.com
lisw.inmarsat.com
a01d00rpainsw01.inmadds.inmarsat.com
lnra3p01.inmarsat.com
guest-aes.inmarsat.com
www2.inmarsat.com
intranetmedia.inmarsat.com
api-sandbox.inmarsat.com
dashboard.fleetdata.inmarsat.com
A01E00PPIMEL002.inmarsat.com
prepaycrm.inmarsat.com
bgantools.dev.inmarsat.com
jenkins.common.inmarsat.com
prod.bganbss.inmarsat.com
webmail.inmarsat.com
debtinvestors.inmarsat.com
stage-enterprise-managed.inmarsat.com
sonarqube.devops.inmarsat.com
api-dev.inmarsat.com
dremail.inmarsat.com
ststest.inmarsat.com
fleetcompute.portal.prod.inmarsat.com
www2.inmarsat.com
bugs.dev.inmarsat.com
digitalchatcardportal.inmarsat.com
sdm.dev.inmarsat.com
sts.inmarsat.com
*.abu.inmarsat.com
prod.bganbss.inmarsat.com
stagingmedia.inmarsat.com
ims.inmarsat.com
sapmobileappsdev.inmarsat.com
aes-ra.inmarsat.com
developer.inmarsat.com
strategy2020.inmarsat.com
contracts.inmarsat.com
byod.inmarsat.com
csosecurefile.inmarsat.com
*.cap.inmarsat.com
A01E00PPIMEL001.inmarsat.com
mydesktop.inmarsat.com
bugsaws.dev.inmarsat.com
bugs.dev.inmarsat.com
slog2.inmarsat.com
esasselfservice.inmarsat.com
caa-jenkins.devops.inmarsat.com
lnra3p01.inmarsat.com
drra3p01.inmarsat.com
lncorpra01.inmarsat.com
www2.inmarsat.com
www.ims.inmarsat.com
sdba-jenkins.devops.inmarsat.com
sdm.dev.inmarsat.com
mtp-ra.inmarsat.com
bugs.dev.inmarsat.com
prod.bganbss.inmarsat.com
amseanliwar.abu.inmarsat.com
regulatory.inmarsat.com
fleetcompute.portal.prod.inmarsat.com
oy-vpn-101.tools.lab.inmarsat.com
esasselfservice.inmarsat.com
api.inmarsat.com
shipbook.inmarsat.com
webmail.inmarsat.com
esas-beta-auth.inmarsat.com
api.inmarsat.com
careers.inmarsat.com
services-test.inmarsat.com
www.inmarsat.com
*.uua.inmarsat.com
test-jenkins.devops.inmarsat.com
dxcb.bp.inmarsat.com
sso.inmarsat.com
www2.inmarsat.com
api.inmarsat.com
ppm.inmarsat.com
prod.bganbss.inmarsat.com
gw-qa-app.inmarsat.com
docserve.inmarsat.com
sdm.dev.inmarsat.com
research.inmarsat.com
a01b00actcenw01.inmadds.inmarsat.com

Certificate

The complete raw certificate details for sts.inmarsat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTK75+BZ76oOlRrtYFQb
Kvny8X2w/Du4iK+WzZgd3URCuhIioJcD2oLk3oEC72H0tdcr2Fd/w+2bIBquDOXK
bRte2BuVp3r2ubfeX+ChXfnY+/a2iJHHgXHIV7GtcgKt4KlnIGWRLh8lhIg5d42/
ffGBb11Jmo7a6Ff58Q7QtrJ3oJfdX5yYLwJRl+8A9h/k6cWwGhVCAh98SpFSKMEs
0/ty58sW0QOWV4S1KMDNPGD7bi6a+JdxG6cf39jkfg1KDMbey45KkXE++GgHzpew
knSSYo+ELFSvcRJSm7J43JFZBJuABcaL+UwjIQmMNiIA3GPssFqFIby1Mgx4QA+U
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5315212922793531357584009664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 14:16:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 11:21:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Inmarsat Global Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts.inmarsat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18834525311175263349110092925869602842933728412185454661991897795247383604698482049590683862144219725750235859778852487127687645325162994760013125182055783245534862650181084717079785994771106441244433453459064743173801113831636225612405619318803171511026874153531840415655550077215639720254355250249245641699073069030919505346460783396331939238438288160544188191891595696486769917900379769702962440737211931309910964085486971492829819291662995906046254779860090533756938623641076118705667065425498735327659596792893240239837315876152095731937541211575161785997652785523046446870681999173906167796786519922952771703839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.inmarsat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1050a6b6a23ed3d13e2dc8a9e70c7ef3dcb4b322
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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