ucr.lulumea.com

- LULU GROUP INTERNATIONAL - SOLE PROPRIETORSHIP L.L.C. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 13:fb:48:16:14:23:37:78:bd:15:c1:85 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

LULU GROUP INTERNATIONAL - SOLE PROPRIETORSHIP L.L.C.

Organization: LULU GROUP INTERNATIONAL - SOLE PROPRIETORSHIP L.L.C.
State / Province: Abu Dhabi
Locality: Abu Dhabi
Country: AE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 13:fb:48:16:14:23:37:78:bd:15:c1:85
Serial Number (int): 6183995984995028961338966405
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 36:b2:cf:3f:36:34:12:58:a6:14:eb:a5:73:c7:be:61:2d:e6:a5:af
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): e7:59:05:19:83:0c:d5:31:40:df:70:33:52:fc:70:6d:dd:15:e4:9f
Fingerprint (sha256): 26:4c:fa:11:71:d6:1d:5e:75:f9:73:66:b6:77:ca:75:c5:43:f3:f5:b6:13:8b:f2:65:38:a7:da:b2:50:a1:65

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate ucr.lulumea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucr.lulumea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucr.lulumea.com

Other certificates including the domain name lulumea.com

(limited to 100 certificates)
connect.lulumea.com
vc.lulumea.com
incapsula.com
incapsula.com
sni.cloudflaressl.com
demo6.platform.fit
incapsula.com
2fa.connect.lulumea.com
incapsula.com
lulumea.com
sni.cloudflaressl.com
admin.articwise.pt
mdm.lulumea.com
*.lulumea.com
incapsula.com
incapsula.com
incapsula.com
ucr.lulumea.com
sni.cloudflaressl.com
lulumea.com
incapsula.com
lulumea.com
ssl366448.cloudflaressl.com
uc.lulumea.com
ciqnp.lulumea.com
www.kultify.app
lulumea.com
sni.cloudflaressl.com
sbuat.lulumea.com
2fa.lulumea.com
*.lulumea.com
cisp.lulumea.com
ucr.lulumea.com
incapsula.com
incapsula.com
nathanssweets.co.in
lulumea.com
sni.cloudflaressl.com
fs.lulumea.com
applinksstg.lulumea.com
cpg.lulumea.com
lulumea.com
sni.cloudflaressl.com
cpg.lulumea.com
made4families.shop
incapsula.com
incapsula.com
sni.cloudflaressl.com
incapsula.com
incapsula.com
vds.lulumea.com
dev.domainplug.io
qmms.lulumea.com
cpg.lulumea.com
sni.cloudflaressl.com
lulumea.com
vds.lulumea.com
sb.lulumea.com
vc.lulumea.com
incapsula.com
jesusfireministries.in
lulumea.com
lulumea.com
sni.cloudflaressl.com
fs.lulumea.com
stghybris.lulumea.com
incapsula.com
lulumea.com
incapsula.com
thepub.tresastronautas.com
admecloud.com
sbuat.lulumea.com
sni.cloudflaressl.com
ssl366447.cloudflaressl.com
lulumea.com
expo.staging.properati.com.co
sni.cloudflaressl.com
incapsula.com
incapsula.com
incapsula.com
vds.lulumea.com
mdm.lulumea.com
vds.lulumea.com
admin.chronox.io
sni.cloudflaressl.com
vds.lulumea.com
stghybris.lulumea.com
incapsula.com

Certificate

The complete raw certificate details for ucr.lulumea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6183995984995028961338966405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 12:31:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-09 12:31:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LULU GROUP INTERNATIONAL - SOLE PROPRIETORSHIP L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucr.lulumea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740833206323486716879270640129332751127799103900276636447151594551595623557112494630293085743104735333581308046223030928136702959375858524143017310204662330384963652508301916222907993462513557343804704713875955205581777509669058394065134755229907492834404322855315813592737136612396424421840835792875496103392838751565787769380427766021438595917103782743224213255931197996767716599127210014302433686030766100764510858278082857904162776224564631637059649563173793307216792897596213091934187459097296583568599956767616818762722955732763095945218495952786842523747218118913344389084756232837229328796055783446087790051151789120968203343721440414372461499671749093711472847112764833672050010711382886127114261279604769528157170620435071197326425185130465864268748071795832413233519536733858744124153319819166222665601739897606506218954636210025558621259211096015134330060248950158344557583410396025449179579950379104494628636007652464320281398656864275515292163782466297853461172339294672388601390898157916345260506638480473695637758434985928640300006056848377929196694599153438467362351812098798031035858526426754786717800030009501784486421598247685995944490617847386250598798320797740045874902425434195654962793625582015121570312297897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucr.lulumea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36b2cf3f36341258a614eba573c7be612de6a5af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ac4398931428b02e281aab1b39958d00dd5cd3d2595e28ad809287f567d3a4db56d1c34165a4e6fe8c85755dabca1c0b3323f05350343e2ab60d8af86a237115cdae9d3fcb2e06e6115e23d7c5d6585cbfdd3a95966c1fb24d5c15da48b538f25d894afb40da9ad14622cda6b2aaf48cdfcdc0b50091889d887ac155124488ac835dc2eed58f3b91c4a61fe32e21744fd7da898509d4177f321932745e9be7296c8e71a0267f9b951aa76732d4801f45300fc35cdd0dcff77809bfc8ff35587d7618a7e55f6da598b8327a84cf83e4b37c9e60a60f9ba18b7aaff7d7eb1a87773dc5ef8d2a9c53ade3fca7375d835df0c9f02f41277563404a7e8166dcb488d