zy-nonprod.zeekit.me

- Walmart Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 45:00:51:1b:0c:46:4f:ce:8b:5a:23:0c was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Walmart Inc.

Organization: Walmart Inc.
State / Province: Arkansas
Locality: Bentonville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 45:00:51:1b:0c:46:4f:ce:8b:5a:23:0c
Serial Number (int): 21354848688304494298774774540
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8f:c7:e5:46:16:33:11:d8:a3:f7:2c:c3:ff:46:f5:9b:05:e2:f8:e4
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 60:29:fb:58:d2:4e:9b:da:c6:ec:cf:86:e1:ad:bd:f3:a0:50:ef:8a
Fingerprint (sha256): 1d:bd:44:36:39:dc:e3:fc:f2:52:6b:9f:18:99:06:23:b8:72:8e:d3:b6:5f:d2:46:9c:65:59:e5:90:36:d3:16

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate zy-nonprod.zeekit.me

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zy-nonprod.zeekit.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zy-nonprod.zeekit.me

Other certificates including the domain name zeekit.me

(limited to 100 certificates)
www.blog.zeekit.me
vip01-misc-qa-https-web-p-1.walmart.com
mailit.zeekit.me
vip01-misc-qa-https-web-p-2.walmart.com
vip01-4-misc-qa-https-web-p-1.walmart.com
qa.zeekit.co
zeekit.co
mailit.zeekit.me
vip01-5-misc-qa-https-web-p-1.walmart.com
dev.zeekit.co
vip01-misc-qa-https-web-p-3.walmart.com
zeekit.co
service.zeekit.me
vip01-misc-qa-https-web-p-3.walmart.com
*.office.zeekit.co
vip01-misc-qa-https-web-p-1.walmart.com
qa.zeekit.co
service.zeekit.me
dev.zeekit.co
mailit.zeekit.me
mailit.zeekit.me
qa.zeekit.co
dev.zeekit.co
zeekit.co
qa.zeekit.co
zeekit.co
zeekit.co
zy-nonprod.zeekit.me
qa.zeekit.co
zeekit.co
qa.zeekit.co
*.office.zeekit.co
service.zeekit.me
blog.zeekit.me
vip01-misc-qa-https-web-p-1.walmart.com
zy-nonprod.zeekit.me
qa.zeekit.co
zeekit.co
zeekit.co
zeekit.me
qa.zeekit.co
service.zeekit.me
mailit.zeekit.me
*.office.zeekit.co
zeekit.co
vip01-misc-qa-https-web-p-1.walmart.com
blog.zeekit.me
zeekit.co
zeekit.co
qa.zeekit.co
*.office.zeekit.co
collective-il.zeekit.me
zeekit.co
dev.zeekit.co
zeekit.co
blog.zeekit.me
zeekit.co
dev.zeekit.co
vip01-misc-qa-https-web-p-3.walmart.com
zeekit.co
*.office.zeekit.co
*.office.zeekit.co
*.office.zeekit.co
mailit.zeekit.me
qa.zeekit.co
vip01-2-misc-qa-https-web-p-1.walmart.com
vip01-7-misc-qa-https-web-p-1.walmart.com
qa.zeekit.co
zeekit.co
zeekit.co
qa.zeekit.co
qa.zeekit.co
qa.zeekit.co
dev.zeekit.co
fa-nonprod.zeekit.me
service.zeekit.me
vip01-misc-qa-https-web-p-3.walmart.com
qa.zeekit.co
mailit.zeekit.co
zeekit.co
mailit.zeekit.me
vip01-misc-qa-https-web-p-1.walmart.com
qa.zeekit.co
qa.zeekit.co
fa-prod.zeekit.me
dev.zeekit.co
dev.zeekit.co
dev.zeekit.me
mailit.zeekit.me
dev.zeekit.me
dev.zeekit.co
qa.zeekit.co
vip01-7-misc-qa-https-web-p-1.walmart.com
zy-prod.zeekit.me
service.zeekit.me
dev.zeekit.co
zeekit.co
mailit.zeekit.me
zy-prod.zeekit.me
vip01-misc-qa-https-web-p-4.walmart.com

Certificate

The complete raw certificate details for zy-nonprod.zeekit.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32ODVZLCHIaCfsBt0c7Z
IIVfetKxiKXVSysWEkWkEGzt4F5vYUQXJU97K2E1TMhQFz9QYvzQkRnzNY54nBC7
IMVbKU+6VBZjhezzrvq+gHLnXR8bd3cwDtBCAGY/mt/8axEAU6o9ykpv+Cr3PU3n
bDMM2Wmbqh7/Q8zbJ/2xSry6UnvLEC7KGMEr8WiYLk2p4PGADuY0UcElx+f5/rYl
WYZffhDXVufBLtFNzvx5kknmSo/bbvpFLc7u6YGXxNUzhbq9Pb5TcHZ5SX8UlQqU
ZP+gLvubhUTkt6WKZnXYaPMtG+QbAU+WVQnCgdAUpXeUB7npovg5kMq0oUYnLE7r
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21354848688304494298774774540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-07 19:59:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 19:59:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walmart Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zy-nonprod.zeekit.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28200213708736686238007038056791451697089401683932281935276432570137449716751927678237053223888580143253244536291033654558504674985320937886369454861689134174000848766721244257405293138024965228623016139507437445754708202439163353884051910801199148200002944772293254110784637131088488872975729071363272105650959254058446911606639859676705422190048247705155660309144943357808276818752461412008797316939677802703859991118012522824580682750565248459881129639174622730790023623065726913810214822226999091480550400544908043329519845633339762778382449299476718006734166327300562215417137352678804729365984829478511601183657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zy-nonprod.zeekit.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fc7e546163311d8a3f72cc3ff46f59b05e2f8e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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