vpn-uk.dechra.com

Issued by GlobalSign RSA DV SSL CA 2018

About this certificate

This digital certificate with serial number 7e:2f:d1:3e:63:42:4e:b7:d4:d1:9e:e4 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn-uk.dechra.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:2f:d1:3e:63:42:4e:b7:d4:d1:9e:e4
Serial Number (int): 39052918876456784266049724132
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e0:c1:6b:c2:3c:f2:51:03:9e:97:0b:8f:e5:31:03:2c:d8:3c:32:d4
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11

Fingerprint (sha1): 26:d0:93:1a:68:50:9f:c7:55:16:c9:f5:53:e5:46:4e:9c:9a:be:b6
Fingerprint (sha256): 1f:57:12:f8:54:d2:32:9c:9e:15:d5:d5:24:50:60:73:a0:10:97:6a:4a:07:c8:7b:de:54:dc:53:0a:ad:f3:4d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl

Check the revocation status for certificate vpn-uk.dechra.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn-uk.dechra.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn-uk.dechra.com

Other certificates including the domain name dechra.com

(limited to 100 certificates)
webmail.dechra.com
www.highq.com
www.highq.com
mail.dechra.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
USMS0006.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
share.dechra.com
dechra.com
www.highq.com
www.highq.com
www.highq.com
brand.dechra.com
www.highq.com
*.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.dechra.com
sip.dechra.com
www.highq.com
Projects.dechra.com
*.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ibercliente.dechra.com
www.highq.com
appletest.dechra.com
ibercliente.dechra.com
brand.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
vpn-uk.dechra.com
www.highq.com
www.highq.com
www.highq.com
mail.dechra.com
www.highq.com
vpn-uk.dechra.com
www.highq.com
www.highq.com
www.highq.com
*.dechra.com
citrix.dechra.com
www.highq.com
sip.dechra.com
owncloud.dechra.com
dechra.com
www.highq.com
academy.dechra.com
www.highq.com
brand.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
herd.dechra.com
www.highq.com
www.highq.com
www.highq.com
share.dechra.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
vpn-us.dechra.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
thrivefinancially.dechra.com

Certificate

The complete raw certificate details for vpn-uk.dechra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnUrkadPsPUzOTJGjVW2H
BmMChoSU2fOKJHeTlQYqFFl802LGuwHRblGZPrOuLHXVovIbE/i5eVHcxbi4WKN0
zfdmfQ0LNcfl7brD+6yfjlQAIxnsMscC5hj7qdeH3dsv/sYhxT1/Jpu3DZk4vPzm
v+08gfrjzyqI9jFcDP+eh/Rp2wudiZNdTLaFnyJ0euJXN/S10bkU3WzBgw9AoEI+
3+UBH7+ljq2wjZz3/ELJN495XsGnG54j6CwCojQqgEdC/B+VwJUWHhPGkqinL92q
KupmHjSDuhaaPwYGUPm6szNgGcfp/jqZkEkeVXl0j/U9/HBbGlWMezcUH28c922B
Plf5KRYNHCkz6d5ADPOa2MlckThsIa2sczpX/xtQZSLkbC60mOKydZHATEK2/5uG
FIdchSvhkimFDxEka/h/GkBsD7R5i0m9pyQdz6kHev4y1SVz24rvj4zltoMZMvei
EDXc2YQSEgOD4mM/MWJf6NKTLgQk35IGgfnghbvFlsshS9jc1dWby3SrrAdsuzo5
uBbE4d1XJwVdiDzTPH9Yo/2fPiTARRBsM96uJzhOpiALP2Q51h5ztAigT+QhmxsZ
IQg0eWQcZSruTZ0m7Blpke5sQKLnWwktTAKXjWZ8tlUJPebHVRMsK2hZMAcegsvl
mJXRsxBsVMq4U1jBjaV7JXsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39052918876456784266049724132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 12:46:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 18:13:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn-uk.dechra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641697609623921286096139135440384989095430268495553466718989131414982071898939180436665710030055320152749630641349020329300913175943089100217089027218721034843950878945782175589221501929031203713646389657524545864241652506844906405481822415446496761629905460433745473749602439514059728368155861034421615947533619913465300331946998915517520322122787677729895853402508585183795842811265041814161194596757000779556987588612931427861958670712406692660850228833823001066132644777209197576228203086143767049090556541708612773969458565909398856629561187375789384538720465998092766940555511249690404528160162982299308248981264965436846849847896833437141047742250733470624117771931346045312920393213938730339525078426947835866054638524621630668876148380512812640353367750404841746675391423075836130652554834764444616745656987623398667655724194708464395105670574976303701841864151797339909253314429960877734611369211342888556208979812397795374278895347003420267282606405683798877579432700595084492795866223766888765522970707297721271627713017530763206549868423429161173738700945276709340449407945544320850999976556478107822008811773588322698409049515096784713305695466225913952925394917268858703982001632827919297568037577567403752583344104827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-uk.dechra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0c16bc23cf251039e970b8fe531032cd83c32d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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