www.gevalia.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3a:8b:a2:da:b9:fc:e8:18:27:69:9e:0f was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gevalia.com,OU=Domain Control Validated,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:8b:a2:da:b9:fc:e8:18:27:69:9e:0f
Serial Number (int): 18118940316726722174114176527
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 0e:2a:cd:0d:c1:c3:f7:9c:7b:67:8c:63:cf:a8:02:44:53:9e:20:36
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 5f:10:39:93:87:c9:25:41:ca:ea:f1:34:95:7f:52:60:15:9f:ec:43
Fingerprint (sha256): 24:45:07:e1:d6:ce:e3:79:f2:53:52:42:72:7e:a3:56:f2:9a:3b:16:45:75:24:28:4e:62:6b:5a:5a:7c:4c:76

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.gevalia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gevalia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gevalia.com
gevalia.com

Other certificates including the domain name gevalia.com

(limited to 100 certificates)
help.gevalia.com
dev64.gevalia.com
onfarmchat.com
gevalia.com
www.psglogin.in
gevalia.com
help.gevalia.com
gevalia.com
media.gevalia.com
www.gevalia.com
www.gevalia.com
gevalia.com
www.gevalia.com
cdn.steviewonder.es
gevalia.com
www.gevalia.com
lingo.mx
help.gevalia.com
help.gevalia.com
help.gevalia.com
partners.medics.academy
refer.gevalia.com
gevalia.com
www.gevalia.com
www.gevalia.com
gevalia.com
api.gevalia.com
www.gevalia.com
www.aafricaservices.co.za
help.gevalia.com
foamathome.gevalia.com
gevalia.com
www.gevalia.com
gevalia.com
help.gevalia.com
help.gevalia.com
gevalia.com
www.gevalia.com
cdn.steviewonder.es
mossdev.gevalia.com
media.gevalia.com
help.gevalia.com
kaspero-backend.elliq.co
www.gevalia.com
egt.sevenlynx.com
help.gevalia.com
help.gevalia.com
help.gevalia.com
help.gevalia.com
www.gevalia.com
refer.gevalia.com
jojokimys.com
help.gevalia.com
demo.cao.app
www.gevalia.com
help.gevalia.com
gevalia.com
www.gevalia.com
www.gevalia.com

Certificate

The complete raw certificate details for www.gevalia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVoIiD9oFug6Yl+J/Yhz
QJ7d/YYZZNt48bhIRsSoH+YicbNzAfWM3lTQ3EGpnjo35ro7C+BFlKELuHfc+K8E
GYFRJ9fQeVCLUPkvR7ptqZ82Z6HEUoLQPWZFPucr2t3C4+tZl6sOFFVOybrVgDRC
G6G/Ol7lixx6naRor+N13Dy9U92NhAt73TTucqbUagzcL6SxEr5wRr0FsC8/KDbA
JLyyhK7HhL4Z4wjEIOfb/3bwFn6UtHIk+erK2S1R7wJNmAd+akqKhkMHHhQEMapY
Gg82GG/3+y3rungu1CyuEP+wEFh7vVKOfqB+1hq4gg2UFgKOI5PDfvct/NzNqlzY
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18118940316726722174114176527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-15 15:16:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-16 15:16:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.gevalia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22388577068211946959850884491136079551675560397071858316193927542727145658884023309569700944497375295302733929923186902837542764074107057338581564046036428098689440378042209377361970773981174924519026885406057213420815073088958499660031765336491776575510408773881691982993863990093100078607186149612062250022775231760337564553169100528935725742059239995311536472384769744880249858669454162134652349367421705206277467340783566705449613816297817278660417648279826376357736511583421503470933896567425772906462316243861595397145491919543980051858814287772525151835249330021250967799512169808709316756889042927281879439473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gevalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gevalia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e2acd0dc1c3f79c7b678c63cfa80244539e2036
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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