webapps.luthercare.org

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 2d:05:84:ee:63:f7:cb:3d:a9:fa:56:cf was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webapps.luthercare.org,OU=Domain Control Validated,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:05:84:ee:63:f7:cb:3d:a9:fa:56:cf
Serial Number (int): 13933497820962879169237767887
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 96:80:20:3a:9b:e9:e4:3f:4a:ab:43:c2:bc:fe:0a:fe:a9:28:ee:b6
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): f7:7f:cf:f7:2b:12:1a:44:19:5c:68:f9:d3:73:88:ca:6c:60:33:3d
Fingerprint (sha256): 26:e6:dd:7e:98:3e:15:3f:a7:85:6c:82:2f:c9:84:f2:15:97:f0:62:60:f4:67:8f:c0:a0:bd:95:97:91:1d:eb

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate webapps.luthercare.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webapps.luthercare.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webapps.luthercare.org

Other certificates including the domain name luthercare.org

(limited to 100 certificates)
LititzDC3.luthercare.org
*.luthercare.org
board.luthercare.org
board.luthercare.org
luthercare.org
exchange1.luthercare.org
webapps.luthercare.org
mail.luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
exchange1.luthercare.org
webapps.luthercare.org
luthercare.org
luthercare.org
lititzexch01.luthercare.org
storefront.luthercare.org
mail.luthercare.org
luthercare.org
www.luthercare.org
exchange1.luthercare.org
mail.luthercare.org
webapps.luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
board.luthercare.org
lititzexch01.luthercare.org
mail.luthercare.org
webapps.luthercare.org
webapps.luthercare.org

Certificate

The complete raw certificate details for webapps.luthercare.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YFm3eIbC+v/dhVFHfdS
HO2ZlSrH/g9sxu21xDLOh3pkC3w4TKygTipDJzCGtP60wvVdYbK5OxmYRteS7ol8
h50kIGnl6QiF3uQtGLbq/pT1LK02SoxNgB2YlMXHsGftbtP4BccBwmH1N6JLZZ3J
ODnLwQM+UsswOj22PYTEUpSkuzZnzMj3n4Vce70BBaNFmg2uG2OB7ItBMliu0NuD
o2eeoyr6u5CK9GNFOyOknM3BopiOuvHAl2ACyuavHM89nLZ32pgNzns2uDFH90Qn
+vVqKYPTCk0WJ6FLURZoto4EpcAZJZ9YLTseobf19So5l+vekL+WLGeMgB3bRO9Q
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13933497820962879169237767887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 13:40:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-06 03:11:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webapps.luthercare.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30487241914071744552743537880689765253662423968607987557183357025771961664769850583535775131494515899920964909152757583312370225879082439578387120862203148726695255211618150876666042398588111271461487084265897929415295021030226540246535760158148568264565524479743447426773412653103810368371508786716776040779704455131102298526380309363003510750411449520512049911383025120591460974783721005875711920669700418804376700506844243099241944491380444666288529208855474342508646929131430700663969897017228760845450015372420125303753102139574705378529015195028701130618750635284098700739466057969038584188558425869771242164271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps.luthercare.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9680203a9be9e43f4aab43c2bcfe0afea928eeb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0062d8124c420590f65b509e3d945e13b9b77a21d3ad59830ff0b6ce8cd3c4894f101fed96e91b03a086f1a10fc5f35bf799fc1c5dcdc1d42ed059f23f0753c17825fa38aa3276fc57958a797ad1141555b2b7b5e6c59adc6862811d1d46832d10c35c405a92474e8044a5e7f565b0a9708029c06f147e83a85fa30451db85742a8396834dcc36949a3a12738367b4b6415ec0ed0384cbc60be1d31565709f737c84249238286d269cdff45ad171eac0f97c9c0706e33ee3f56b7795e1cb40d7a46bda22af27bc1fce2dd403e98cab590e6618b8a02365eee6a43b5fc2fa1039c846b25f85dc8e1f1106350e5f9c6020e86cc02fd486990233147002fdd9583c1b