www2.pugpig.com

- Kaldor Ltd -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 57:8a:53:7d:8c:ff:ae:9c:1e:1d:dc:28 was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kaldor Ltd

Organization: Kaldor Ltd
State / Province: Greater London
Locality: London
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 57:8a:53:7d:8c:ff:ae:9c:1e:1d:dc:28
Serial Number (int): 27092421889984958469326625832
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 22:57:5b:6a:10:07:18:18:a2:7a:13:66:07:bd:2a:97:f1:79:f2:58
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): fa:39:5d:dd:e5:f5:ab:1e:fe:e1:98:5c:d0:3c:c3:36:56:f2:48:9a
Fingerprint (sha256): 15:f7:54:2d:c5:f5:8e:00:54:f1:60:32:65:7f:7e:7e:4b:95:6f:8e:50:2a:ee:9e:0a:68:72:2e:2e:7a:3f:31

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate www2.pugpig.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.pugpig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.pugpig.com
alumnimag.ucalgary.ca
app.investorschronicle.co.uk
app.jwnenergy.com
app.spectator.co.uk
magazine.slimmingworld.co.uk
reader.moneyweek.com
search.taxfactsonline.com

Other certificates including the domain name pugpig.com

(limited to 100 certificates)
www.pugpig.com
www2.pugpig.com
attstatus.snowflake.com
attstatus.snowflake.com
*.express.pugpig.com
dns-vetting1i.map.fastly.net
www3.pugpig.com
*.financialtimes.pro.pugpig.com
www.pugpig.com
*.site.pugpig.com
www.pugpig.com
attstatus.snowflake.com
www3.pugpig.com
*.condenastgb.pro.pugpig.com
j.ssl.fastly.net
www2.pugpig.com
attstatus.snowflake.com
attstatus.snowflake.com
attstatus.snowflake.com
j.ssl.fastly.net
*.condenastgb.pro.pugpig.com
www.pugpig.com
*.springwise.pro.pugpig.com
attstatus.snowflake.com
dns-vetting1i.map.fastly.net
www2.pugpig.com
www2.pugpig.com
*.express.pugpig.com
attstatus.snowflake.com
j.ssl.fastly.net
attstatus.snowflake.com
www2.pugpig.com
www2.pugpig.com
www.pugpig.com
www.pugpig.com
www3.pugpig.com
*.content.pugpig-dev.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
www3.pugpig.com
www2.pugpig.com
www2.pugpig.com
attstatus.snowflake.com
attstatus.snowflake.com
www2.pugpig.com
j.ssl.fastly.net
*.condenastus.pro.pugpig.com
www.pugpig.com
*.hearst.pro.pugpig.com
www.pugpig.com
*.qawordpress.pro.pugpig.com
*.sirlinkalot.pro.pugpig.com
attstatus.snowflake.com
*.qawordpress.pro.pugpig.com
*.content.pugpig-dev.com
attstatus.snowflake.com
dns-vetting1i.map.fastly.net
www2.pugpig.com
dns-vetting1i.map.fastly.net
www.pugpig.com
*.condenastgb.pro.pugpig.com
www2.pugpig.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
www2.pugpig.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
pugpig.com
www.pugpig.com
www3.pugpig.com
dmgt.pro.pugpig.com
www.pugpig.com
www2.pugpig.com
www2.pugpig.com
attstatus.snowflake.com
www.pugpig.com
www.pugpig.com
www2.pugpig.com
admin.pugpig.com
www2.pugpig.com
attstatus.snowflake.com
www.pugpig.com
*.sirlinkalot.pro.pugpig.com
*.content.pugpig-dev.com
attstatus.snowflake.com
express.pugpig.com
www3.pugpig.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
*.firmworks.pro.pugpig.com
attstatus.snowflake.com
pugpig.com
attstatus.snowflake.com
www2.pugpig.com
www2.pugpig.com
dns-vetting1i.map.fastly.net
www.pugpig.com
dns-vetting1i.map.fastly.net
attstatus.snowflake.com
www3.pugpig.com

Certificate

The complete raw certificate details for www2.pugpig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB7gXhKhqGv+e952omqK
+uGyPbcs3c8uBUAk0jmDBhxIDyiYGXNz+SVrAKdy5Kbn5yl6hSrIqU3wdKfoYcWg
aVdHqhybEd0Soc7SBHRxa1KAA38hbWCKhXmy8KrkIU2ATZ/aoCOSjgPRQRA1e7cQ
FAHSr9zMAiLROAF+kxVCeOi1bcRVUqa7pgHDl2yElei+aaYyiJy3WCyozfRJKJZq
t/gDzW05MrHHEsE3rhzy8uZbKZsXWbVxTOI5EtDnguGKc2pXHhPwQWuowKOCZEuF
gmfjnfURftsmtBjDmgviCQYSDk8YAHJLp2kYo+2RD1hhY2y7j5yQ/Z8nf+RrVnxq
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27092421889984958469326625832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-05 11:04:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 16:08:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaldor Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.pugpig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23243073851539639021855699667761738766471774949364653096014016854985981266592433343998132887751781507835603233433071610582706578599862343832914333130958862323520217190350958759816026635967380942070879210282401271132173738895502533769029553109307579897634463832728633897856562169684538623964066424488758356466642560895758730292324229954943793901040168388789173959580958428785608985302630963873400658970621662453374797438485244738367519677622603478524145889762899956180302880624240557210529542790843261642395700127000306060566119435513511176143874524560248931911727319252617425082659403246367217181830522946725336607421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.pugpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnimag.ucalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.investorschronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.jwnenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.spectator.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.slimmingworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.moneyweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.taxfactsonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22575b6a10071818a27a136607bd2a97f179f258
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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