*.ai-linka.com

- nanoconnect,Inc -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 10:37:5c:cd:17:44:ff:95:f5:6b:35:86 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

nanoconnect,Inc

Organization: nanoconnect,Inc
State / Province: Hyogo
Locality: Kobe
Country: JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 10:37:5c:cd:17:44:ff:95:f5:6b:35:86
Serial Number (int): 5018689318196030802844398982
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: dd:c4:20:c0:3d:63:12:56:61:10:49:bf:f3:74:bd:72:8e:68:87:51
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 17:a3:6f:f5:76:c4:bf:7c:63:88:5a:fc:02:eb:49:c6:b6:74:0b:85
Fingerprint (sha256): 1c:7a:1b:c8:6c:1b:40:25:c3:f3:fa:3a:2b:ce:02:41:92:01:b0:2b:b9:4d:6e:d9:0b:93:90:8b:ba:c2:61:50

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.ai-linka.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ai-linka.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ai-linka.com
ai-linka.com

Other certificates including the domain name ai-linka.com

(limited to 100 certificates)
grinninghermit.com
proto-store-mgmt.ai-linka.com
apis.wordbox.ai
www.mattebates.com
www.swgt.in
zawgyi-unicode-converter.dagonmetric.com
ai-linka.com
v2ex.de
sales-demo.ai-linka.com
hookupscan.com
www.intenselydelicious.com
www.sailingvoyagers.com
*.ai-linka.com
www.luizkc.com
tripheist.ai
proto-store-mgmt-dev.ai-linka.com
kikenyatours.com
specialday.app
ai-linka.com
ai-linka.com
ai-linka.com
isostore.outravibe.me
*.ai-linka.com
sentiparser.com
alphy3.xyz
hello.kalimny.app
www.aravana59.ru
bottleshare.de
bradycarey.com
ai-linka.com
specialday.app
*.ai-linka.com
ai-linka.com
www.getshippy.com
jvw.myemmacloud.com
hongkong.imacoco.world
www.tft-ksa.com
www.mziki-tz.com
payments.flincube.com
proto-store-mgmt-demo.ai-linka.com
joysound.ai-linka.com
jedoro.com
www.dobuythai.com
www.ampiguadalajara.com
www.carrymates.com
proto-store-mgmt-dev.ai-linka.com
gift365day.com
brshoes.pp.ua
www.ryanduffield.ca
checkin.uat.theout.com
dev.hbot.io
pizzaplanet.flashexperience.net
proto-store-mgmt-stg.ai-linka.com
www.frank-egan.com
dev.hbot.io
proto-store-mgmt.ai-linka.com
rewards.tsands.com
saviastaff.com
artedilizia2003.com
ai-linka.com
proto-store-mgmt-demo.ai-linka.com
checkin.uat.theout.com
www.missionmatters.org.au
sandbox.lesbonscomptes.app
tkn.cool
ai-linka.com
budget.rebranddesigns.com
www.agrapine.com
lyonrecipes.com
cliniqueveterinairemora.com
aboutnishant.ml
gilbarco.io
app.strygoo.com
www.aipetto.com
ai-linka.com
ga.alrehmanbiryani.pk
epfl.snapmentor.no
www.pubquiz.sk
www.bisconti.cloud
foodzilla.io
tkn.cool
getdottie.app
ai-linka.com
*.ai-linka.com
*.ai-linka.com
ai-linka.com
app.coincu.com
www.lovetoken.club
staging.artometa.ai
www.colinlarson.ca
gift365day.com
ga.alrehmanbiryani.pk
kanutrvl.com
rewards.tsands.com
schulden-hilfe.at
ai-linka.com
ifelseloop.com
www.frank-egan.com
www.mziki-tz.com
www.speckuix.page

Certificate

The complete raw certificate details for *.ai-linka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOr5nEh7KzSadU0RRY8C
8AMYVaij2gsgj0Q3/bS07gEsFme5D/FBzAhEHjWRi4nblVbuJUYtz7O0ISIEPZWC
OgOH7GjEDas8RYH3CZuSJ3f7CrBcJGX60Q4/MoDaw94z4grbnU3L81uD+1IxsZZh
9WPODhgo7Nw6PkTEf7J95MBZvoWj9k2aCGhkjzaBPNFQjl4c2hCmuu+tiDttP72g
e7LkXprLBkwH0n8j2u4P07EJB2T2Hl6Iw/fdfri8LlubfnAn0fN5VcJpStQK9okJ
YdjMDZ/Aza7SEn6qkEXEWgcHAD3ABEUUCsZ6qw9GfCgDFRxzhqK3/fhf7rRzJBYW
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5018689318196030802844398982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 04:32:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 04:32:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hyogo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kobe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nanoconnect,Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ai-linka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21828858965403335575579795764797178930180165102488944888774146264749880287669299925312280482625482545901190612959982115804596524907739721597368111716447353100428394328592998470321094076904710765860946077229361024526532763178911410891805991382168537790451463016388246971043840508915665203139984293451045003496974633450182861858386728173386389942704469215604700778040997900990457489817033402607465216558019728322103866820094796290664794378320801197966271220209917336057094277556400205621574488489705807471862114969564263050083792711624718066796245826655231037979973954055449027708664745347646195516414956562213594601151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ai-linka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai-linka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddc420c03d631256611049bff374bd728e688751
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000168c63afeb600000403004730450220255eeb9f95392fe12fe69111b71f8dd658f398c33d2410bb70dfa6f10664f90e022100ac05d94145c7f2167bf60781fee5691f1ec1e4a289afce3fccf78f8dadfb6a870077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000168c63b01ec0000040300483046022100d8b811d41718faa6d83fe741c00e5ef83abc1b7387a8fe2b191a33f8c79ec206022100baa492b5f6ebac1b8c5cc7e5a1c3854971e0bd2eff6d961366873fe52c411d1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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