brainspacenew.deloitte.nl

- Deloitte Group Support Center BV -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 0c:c3:52:49:42:f9:d1:6e:dc:87:b0:e2 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Deloitte Group Support Center BV

Organization: Deloitte Group Support Center BV
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:c3:52:49:42:f9:d1:6e:dc:87:b0:e2
Serial Number (int): 3949949238171024955250553058
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: a2:38:58:df:c7:26:de:f8:44:50:ed:97:59:9f:97:d1:28:23:c6:6e
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 6f:e2:b3:97:85:8d:77:21:e1:a5:6f:db:6f:c0:1d:27:d4:f7:5f:ba
Fingerprint (sha256): 1a:c1:bd:7d:a5:5d:9e:64:2a:39:40:c5:ed:4a:7c:f0:e0:1d:75:1d:5b:68:f5:42:ff:7a:67:09:f6:6a:5d:c6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate brainspacenew.deloitte.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brainspacenew.deloitte.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brainspacenew.deloitte.nl

Other certificates including the domain name deloitte.nl

(limited to 100 certificates)
communication-trackontrade.deloitte.nl
www.beglobal.shop
magazine.deloitte.nl
*.iapps-t.deloitte.nl
ispacemobile.deloitte.nl
getsupport-d.deloitte.nl
s4hop.sapdemo.deloitte.nl
tax-i.deloitte.nl
e.deloitte.nl
edgejourney-s.deloitte.nl
viewold.deloitte.nl
communication-test-trackontrade.deloitte.nl
4me.qa
view.deloitte.nl
secureupload.deloitte.nl
secureupload.erslab.deloitte.nl
docqminer-model-staging.clipper-nonprod.deloitte.nl
sip.deloitte.nl
wintrackertaxlegal.clipper-nonprod.deloitte.nl
*.deloitte.nl
remotevpn.deloitte.nl
view.deloitte.nl
aeoscan.deloitte.nl
usap42.us.deloitte.com
usap42.us.deloitte.com
ourbrand.deloitte
alumni.deloitte.nl
secureupload.deloitte.nl
das.deloitte.nl
xray-john-old.clipper-nonprod.deloitte.nl
communication-test-trackontrade.deloitte.nl
getsupport-s.deloitte.nl
usap42.us.deloitte.com
alumni.deloitte.nl
communication-trackontrade.deloitte.nl
ourbrand.deloitte
webmail.deloitte.nl
meet.deloitte.nl
ourbrand.deloitte
investoronboarding-d.deloitte.nl
dataplatform-t.deloitte.nl
invisionweb.deloitte.nl
fast50.deloitte.nl
remotevpn.deloitte.nl
view.deloitte.nl
meet.deloitte.nl
abflow-dev.clipper-dcs-nonprod.deloitte.nl
brainspacenew.deloitte.nl
invisionwebsso.deloitte.nl
ourbrand.deloitte
sip.deloitte.nl
annualreport.deloitte.nl
4me.com
sapclientvpn.deloitte.nl
dataplatform-d.deloitte.nl
monitor-d.drop.deloitte.nl
taxifdtst.deloitte.nl
mail.deloitte.nl
events.deloitte.nl
meet.deloitte.nl
*.iapps.deloitte.nl
www.deloitte.nl
regview-acc.clipper-nonprod.deloitte.nl
usap42.us.deloitte.com
academy.deloitte.nl
ispace.deloitte.nl
aeoscan.deloitte.nl
tax-i.deloitte.nl
mail2.deloitte.nl
oraclecloudextractor.clipper-nonprod.deloitte.nl
discovery.deloitte.nl
*.iapps-s.deloitte.nl
roulette-dev.deloitte.nl
www.deloitte.nl
*.4me.qa
tendertracker.clipper-nonprod.deloitte.nl
4me.qa
academy.deloitte.nl
confirmit.deloitte.nl
usap42.us.deloitte.com
*.clipper-audit-nonprod.deloitte.nl
awkwardturtle-test.deloitte.nl
communication-trackontrade.deloitte.nl
tax-i-d.deloitte.nl
secureupload.deloitte.nl
4me.qa
4me.qa
usap41.us.deloitte.com
oraclecloudextractor.clipper-nonprod.deloitte.nl
regminer-acc-admin.clipper-nonprod.deloitte.nl
dkmt.deloitte.nl
alumni.deloitte.nl
webapps.deloitte.nl
sts.deloitte.nl
sso.deloitte.nl
rb-client-impact.deloitte.nl
meet.deloitte.nl
usap42.us.deloitte.com
monitor-d.drop.deloitte.nl
sip.deloitte.nl

Certificate

The complete raw certificate details for brainspacenew.deloitte.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3949949238171024955250553058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 12:16:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-13 12:16:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deloitte Group Support Center BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brainspacenew.deloitte.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 953884853764328757424689873829308590324150918760090048101383835965766074105181784200956415284147559964801147896258427592052688033888248465078109024163554004193535716069174649579627983330485564337218620424641542648257859473192956197713921379415861438555462232206156953757225741339237860223921798806274663843122584259480879964070363969879547067334311791523811896632056709715236887796707118144329819712213795983961026186775147592608283292130895787237179509919673571729081646805396588484588888681488932159724028333838758051143127535382045788327933339271199247807607468074789606969807708199007099902002392374228776251644077740222854141271376388991722272151450044629161956574580451080218897901829861843786697572109986631072370810535333386590502642753879688483850396356630530074288844613906848824997728063748098257935253754089679436648535940588429506808455407676487569079133887121555024637894475954404221125464339962797138063697161530883946172361496656249305717581574056844842240277333933402140105596577909594792496706647572834644311692307537569840008210440065752368048708593092015918882696891872958372970326628747745109565959167737325589114890010196890355845968569815427953041312755496553040964090642607866507386664427296990743980112756809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainspacenew.deloitte.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a23858dfc726def84450ed97599f97d12823c66e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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