receiptsearch.acs.coop.dk

- Coop Danmark A/S -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 0c:0f:85:55:e3:84:7d:4f:3e:95:42:43 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Coop Danmark A/S

Organization: Coop Danmark A/S
Organization unit: Technology
State / Province: Albertslund
Locality: Albertslund
Country: DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:0f:85:55:e3:84:7d:4f:3e:95:42:43
Serial Number (int): 3732583664260194513284579907
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 28:ae:eb:a6:2e:c7:40:31:ae:e5:ec:5a:22:f9:d7:98:44:6f:f1:b9
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 8d:64:c8:76:e4:42:41:80:e9:06:55:f7:e9:42:21:33:81:c3:13:2c
Fingerprint (sha256): 20:47:c2:d1:c5:7c:21:0e:7a:e0:9f:38:70:b9:48:54:91:39:61:66:5d:35:8e:e2:fe:6a:f3:30:2e:11:03:be

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate receiptsearch.acs.coop.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for receiptsearch.acs.coop.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

receiptsearch.acs.coop.dk

Other certificates including the domain name coop.dk

(limited to 100 certificates)
anglemark.dk
www.bufras.club
4rex.app
superbrugsen.coop.dk
fs3.net.coop.dk
cloudinary2.map.fastly.net
akamai-san17.exacttarget.com
savannah.coop.dk
icebear.app
guestnet.coop.dk
cloudinary2.map.fastly.net
mad.pre.coop.dk
cloudinary2.map.fastly.net
savannah.coop.dk
cloudinary2.map.fastly.net
redirect.coop.dk
www.elev.coop.dk
akamai-san17.exacttarget.com
developer.cl.coop.dk
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
redirect.coop.dk
cloudinary2.map.fastly.net
voucher.acs.coop.dk
cloudinary2.map.fastly.net
paymentcard-stage.cps.coop.dk
stamp.acs.coop.dk
testportal.coop.dk
*.net.coop.dk
testdummy.coop.dk
tilmeld.coop.dk
cloudinary2.map.fastly.net
opskrifter.coop.dk
*.cl.coop.dk
opskrifter.coop.dk
letsvoo.com
redirect.net.coop.dk
cloudinary2.map.fastly.net
devtilmeld.coop.dk
s4-san.cloudinary.com
akamai-san17.exacttarget.com
cloudinary2.map.fastly.net
cusk.coop.dk
receipt.pre.acs.coop.dk
cloudinary2.map.fastly.net
indkobsliste.coop.dk
apidemo.cl.coop.dk
*.tst.coop.dk
cloudinary2.map.fastly.net
lyncdiscover.mad.coop.dk
devtilmeld.coop.dk
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
adm.mad.coop.dk
cdkwebmail.coop.dk
sts01.tst.coop.dk
ansvarlighed.coop.dk
voucher.tst.cl.coop.dk
coop365.coop.dk
savannah.coop.dk
cloudinary2.map.fastly.net
opskrifteradmin.coop.dk
s4-cloudinary-pin.map.fastly.net
cloudinary2.map.fastly.net
s4-san.cloudinary.com
prdmedlem.coop.dk
forening.coop.dk
bonus-calculation.tst.acs.coop.dk
fakta.coop.dk
adm.mad.pre.coop.dk
cardpaymentproxy.acs.coop.dk
partner-tst.cps.coop.dk
voucher.pre.acs.coop.dk
guestnet.coop.dk
click.marketing.mad.coop.dk
elev.coop.dk
kampagner.coop.dk
brand.coop.dk
*.coop.dk
dash.coop.dk
email.shopping.coop.dk
view.marketing.mad.coop.dk
cloudinary2.map.fastly.net
cloud.marketing.mad.coop.dk
opskrifter.coop.dk
cloudinary2.map.fastly.net
tilmeld.coop.dk
receiptsearch.acs.coop.dk
partner.cps.coop.dk
www.elev.coop.dk
rest.mad.coop.dk
akamai-san17.exacttarget.com
autonum.app
cloudinary2.map.fastly.net
devtilmeld.coop.dk
adfs-token.net.coop.dk
cloudinary2.map.fastly.net
api.cl.coop.dk
md-grive.com
*.pre.cl.coop.dk

Certificate

The complete raw certificate details for receiptsearch.acs.coop.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueHK/XcLwbkl3ukG0d1s
1vc1e0aLpb8JgQ8lAf7JR8HZShF1mHp41JynQNeYl4fqbn+QpmApPE/yBpzF9Upy
dNfVYnf9u+liGGG7Br7PUDP59NXVq8otshXzqgby82yzv58m3Mz93Goi3LJcjt2P
bwTuoauvR+s+VtD3kqypDnp5yN4CakfyW8gV3CRLiyOU/YDEcv8OmLk/QYS88HON
fJ+4OuNLlbhPfLs/f1M4HajM7a66UMS+nhVoKYCNr3I9TA5NBLkPRrec/mfEbbMc
wBVxj0lHdKGG8e5RCAx6pbAGHEViCWYKKlwuHNuLvE+DWi2VfQt0CymyiwhTqp4P
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3732583664260194513284579907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-01 09:26:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 09:26:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albertslund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albertslund'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coop Danmark A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'receiptsearch.acs.coop.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23465429062335185464340540490135971255858056799521141304077062442824751057008681260511538570324160363986440315406075482484280822699975214272560455048573679848980762040821631640275142175266592006648538361651291956628046465292228717804110972555135767209035941269102251383850838487029376244311265474891301024442154223450506716803186178750259200682340505788075426362619816848408954220714773582431581559716870432688559149538293061245197880889354363439069832231829547739576564581256196913746330553494527254655049453328436467080441732967027039082057540375054909058398105030942150070813844800085753566702544345169856525373241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receiptsearch.acs.coop.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28aeeba62ec74031aee5ec5a22f9d798446ff1b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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