ex.sigtuna.se

Issued by GlobalSign Domain Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:6c:f0:38:82:15:c5:c2:8b:6d:c8:90:81:2c:a3:22:0c was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ex.sigtuna.se,OU=Domain Control Validated,C=SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:6c:f0:38:82:15:c5:c2:8b:6d:c8:90:81:2c:a3:22:0c
Serial Number (int): 1492282982869227318753453837861117069828620
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: de:e4:ea:06:c8:be:17:75:f7:f0:1a:d3:ad:b8:71:b6:8d:8e:73:99
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): 31:59:c4:79:6c:c8:5a:df:49:91:01:92:97:1f:82:d4:0a:e2:a7:b0
Fingerprint (sha256): 16:42:bd:aa:8a:96:ed:f3:84:49:e4:4d:ed:ef:8a:f1:d4:c4:af:aa:f7:65:09:52:b4:e9:5e:4b:40:17:c1:0c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for certificate ex.sigtuna.se

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ex.sigtuna.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ex.sigtuna.se
webmail.sigtuna.se
owa.sigtuna.se
mail.sigtuna.se
autodiscover.sigtuna.se

Other certificates including the domain name sigtuna.se

(limited to 100 certificates)
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
fs.sigtuna.se
dns-vetting1d.map.fastly.net
ex.sigtuna.se
sipexternal.sigtuna.se
twentythree.net
dns-vetting1d.map.fastly.net
fs.sigtuna.se
raindance.sigtuna.se
mail.sigtuna.se
hosting.axiell.com
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
fs.sigtuna.se
dns-vetting1d.map.fastly.net
digitalsign.sigtuna.se
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
kom-aaa01.sigtuna.se
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
bibliotek.sigtuna.se
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
lyncexternalweb.sigtuna.se
avvikelsesoc.sigtuna.se
dns-vetting1d.map.fastly.net
twentythree.net
hosting.axiell.com
twentythree.net
avvikelsesoc.sigtuna.se
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
exmdm.sigtuna.se
dns-vetting1d.map.fastly.net
hosting.axiell.com
EPOSTKARANTAN.SIGTUNA.SE
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1.map.fastly.net
karta.sigtuna.se
nls.sigtuna.se
dns-vetting1d.map.fastly.net
twentythree.net
ex.sigtuna.se
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
webmail.sigtuna.se
twentythree.net
dns-vetting1d.map.fastly.net
fs.sigtuna.se
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
exmdm.sigtuna.se
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
digitalatjanster.sigtuna.se
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
old.sigtuna.se
fstodminsida.sigtuna.se
twentythree.net
dns-vetting1d.map.fastly.net
raindance.sigtuna.se
twentythree.net
dns-vetting1d.map.fastly.net
synpunkt.sigtuna.se
www.sigtuna.se
remote.sigtuna.se
mobile.sigtuna.se
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
sigtuna.se
twentythree.net
dns-vetting1d.map.fastly.net

Certificate

The complete raw certificate details for ex.sigtuna.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL/fMnAk2AH7aLp3pC7+
rK/7Uv7TlAugCcU9+MHcgi/FJYmUar8okPJZKcvU5gy/6jAFElcmKMdY4+4loHxJ
jpAmCG2wr2EBohhF9Eov9AHk2Xv7BewnVmR6rIxT6ZFCkkRzi/rGW6rbewMqravH
D9z59UxjTVPnLOcAVT7lE7mnKr8Uyz4/bdi+rsdl4VoWzFA39q09ShadwfT5aLRv
nLo/jCOB+XVZhjcTep1i1cXdwxvpr1sJ48VvwAhppdbepW4k8nzUB/BZf1JmEwj1
HOKBevMuoep93a0I1zY1Sy1PS0gL7MjxU4YazPaMttLkdUdSHV5rs8rlyMwMswcG
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492282982869227318753453837861117069828620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-06 07:53:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-26 10:23:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ex.sigtuna.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21807603996361229908383592797945692978581087971545848220653456545917970138161528898658105747718837923874667834156870214031473948853618470134272872306529343740173791303336669573668025328222204629982486294874856032069125269311765850885910435059180259868509561643216537513887129105434062329945598349824972636699983817803361508529046637394311799384274931957887623909967959641801832716559499486201577769018279127228843741359003972060645387614836250014960257142753507727672163979991031814064100067464909374542279718717765079013187004304353857750935977318396685153205587413592103325495320064801517194012932639550394790774329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex.sigtuna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sigtuna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.sigtuna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sigtuna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sigtuna.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dee4ea06c8be1775f7f01ad3adb871b68d8e7399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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