auth.makenaijastronger.one.org

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 12:45:81:2e:cd:47:e7:e0:c5:7b:f1:fc was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.makenaijastronger.one.org,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 12:45:81:2e:cd:47:e7:e0:c5:7b:f1:fc
Serial Number (int): 5654756106956184678666334716
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 9c:87:6d:6e:47:5e:d6:4f:84:78:8d:1d:f5:06:c2:4a:b0:c7:11:fd
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 58:f0:91:9a:eb:55:ca:3e:f2:32:64:b8:bd:1a:31:2d:8d:a6:d1:ed
Fingerprint (sha256): 1b:1b:7f:34:fc:59:d0:10:d5:3f:1f:d2:c9:65:fe:c6:62:a4:6f:46:27:1a:af:89:91:a4:1d:b6:66:05:13:97

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate auth.makenaijastronger.one.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.makenaijastronger.one.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.makenaijastronger.one.org

Other certificates including the domain name one.org

(limited to 100 certificates)
www-default.actionkit.com
one.org
one.org
act.one.org
www-default.actionkit.com
ssl7009.cloudflare.com
action.one.org
action.standupamerica.com
helpdesk.nibung.com
ssl278675.cloudflaressl.com
connecttheworld.staging.one.org
girlscount.one.org
www-default.actionkit.com
act.progressiowa.org
*.one.org
www-default.actionkit.com
*.bridge.one.org
*.one.org
one.org
act.ayannapressley.com
girlscount.staging.one.org
one.org
www-default.actionkit.com
one.org
act.represent.us
helpdesk.nibung.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
one.org
ssl278675.cloudflaressl.com
www-default.actionkit.com
ssl278675.cloudflaressl.com
one.org
www-default.actionkit.com
girlscount.one.org
action.wemove.eu
actiontracker.staging.one.org
helpdesk.nibung.com
helpdesk.nibung.com
www-default.actionkit.com
ssl507706.cloudflaressl.com
www-default.actionkit.com
auth.makenaijastronger.one.org
act.represent.us
assets.one.org
helpdesk.nibung.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
helpdesk.nibung.com
africaeurope-storefront.one.org
*.one.org
girlscount.one.org
ssl278675.cloudflaressl.com
www-default.actionkit.com
www-default.actionkit.com
one.org
helpdesk.nibung.com
ssl507704.cloudflaressl.com
www-default.actionkit.com
ssl507705.cloudflaressl.com
helpdesk.nibung.com
www-default.actionkit.com
helpdesk.nibung.com
www-default.actionkit.com
helpdesk.nibung.com
one.org
act.medicare4all.org
ssl310139.cloudflaressl.com
www-default.actionkit.com
www-default.actionkit.com
ssl7009.cloudflare.com
ssl7009.cloudflare.com
helpdesk.nibung.com
ssl507705.cloudflaressl.com
www-default.actionkit.com
www-default.actionkit.com
ssl278675.cloudflaressl.com
act.dirtroaddems.com
www-default.actionkit.com
act.leftnet.org
girlscount.one.org
helpdesk.nibung.com
www-default.actionkit.com
www-default.actionkit.com
ssl7009.cloudflare.com
connecttheworld.one.org
one.org
www-default.actionkit.com
one.org
act.progressnownm.org
one.org
ssl7009.cloudflare.com
www-default.actionkit.com
ssl507705.cloudflaressl.com
assets.one.org
ssl278674.cloudflaressl.com
one.org
ssl278675.cloudflaressl.com

Certificate

The complete raw certificate details for auth.makenaijastronger.one.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFNuU6LxJeIJGNTBC7Gc
A0RMIU7Fh3hYlbyoTT+gt2Gc89Mh3oKr8bOpeA1WK88hGaIQPx4rfA56eCAWTLAh
HwiIaDScdbPcmLMRUcgb7lYwY5sKnURUZrQ7sLX+qdcgrGamV/pvcYCFON7C1D8l
VacgBwhTDATux1HhrdI1LuutJG9gWouwoYjq2PWKn0CMYEyGFetCFQD8ZV491Bza
iKRaVa9iC2gXGVtJPgDdnY1i530tbGkCAeSnZz6sEjzzfFNyNA67dVZWTxBpGfCi
cUDviDyuYSDlNAs1K7OH04KRMIAElBlAxIL7r6+rX68OlD1cQbOfqv1rHdRgkHCq
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5654756106956184678666334716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-01 12:37:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-02 12:37:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'auth.makenaijastronger.one.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20744223355988736177644295960339202931781818291941997239923488739956975036210827976748038474380873160229512143760903649376642239779807581580358211798199034410862204221694499787588310896250756151885329043079153441513865814056451633067497346086534671290085847357461917276478239601234373062650754661758748173433337363542285181254565622703234820279695386842093094147902549339602508193744387746483469308158818185451538074921126419360193710157546157937688160136381905968066453985018982450051890749546784234162717498421801781071061227679628063282420848987358764762210269385156653475386090547589424601970211574174719818115671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.makenaijastronger.one.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c876d6e475ed64f84788d1df506c24ab0c711fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (599 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER asn1: structure error: integer not minimally-encoded
<nil>
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9231713017830806095626138537912237175087056305305789827316776365701461084972
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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