*.iihf.hockey

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 2b:91:8e:04:af:61:4b:a3:3d:74:b4:e0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.iihf.hockey,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:91:8e:04:af:61:4b:a3:3d:74:b4:e0
Serial Number (int): 13483820328626968163817665760
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 48:a3:7d:24:3b:9e:f6:84:dd:db:f9:53:41:d2:48:3a:28:c2:0b:53
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 36:b5:05:cf:b1:97:f6:b1:dc:da:1f:c2:fc:6b:28:7a:8a:c9:b4:a3
Fingerprint (sha256): 29:1b:f4:1a:aa:bb:cf:10:5f:fb:3f:f3:8c:50:5e:c8:82:bb:ec:4e:97:cc:4d:83:11:b8:d8:bb:95:f8:1b:1d

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.iihf.hockey

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.iihf.hockey

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.iihf.hockey
iihf.hockey

Other certificates including the domain name iihf.hockey

(limited to 100 certificates)
cyberbarometer.brooklynpartners.nl
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
guias.aerme.com
sni236210.cloudflaressl.com
sni167478.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.eitep.de
surveys.lombardinternational.com
sni236210.cloudflaressl.com
survey.khaoscontrol.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni167478.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
*.iihf.hockey
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
*.iihf.hockey
encuestas.caetanoretail.es
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.eitep.de
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.wildling.shoes
sni236210.cloudflaressl.com
*.iihf.hockey
sni236210.cloudflaressl.com
survey.sheshtech.com
survey.eitep.de
survey.sheshtech.com
iihf.hockey
iihf.hockey
sni236210.cloudflaressl.com
eval.softworld.dk
sni236210.cloudflaressl.com
survey.sweet-move.com
customer-survey.castoredc.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
survey.larsenhowie.co.uk
sni.cloudflaressl.com
survey.eitep.de
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
zoho.teslanow.de
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
iihf.hockey
survey.eitep.de
survey.eitep.de
sni236210.cloudflaressl.com
sni167478.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
ssl420654.cloudflaressl.com
sni167478.cloudflaressl.com
sni236210.cloudflaressl.com
survey.bimequity.dk
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
sni167478.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com
survey.sheshtech.com
sni236210.cloudflaressl.com

Certificate

The complete raw certificate details for *.iihf.hockey in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTX94VOohtIM9q18rB/9
uJ6XOzqj6abSfgmSBk79EXio670BLlLy/cZidBS88CtMoI6sz1sISfJia0oyITqY
AInvIKVrZ7lPR1kzBpdjlnKKxLdVcOw090aBs/gB5YdeF+Q4qGUZ9FPipcvrjia3
0Zv3RQ23/93iPsDQC0ifeaMbi8TM162WXaYJddDm3r9LrtNnL65gTCXDOd53R7D/
YbpwVpODSNx4tLEv4sdTjyoiS2khuVzateNBnkeycVG7gdo7Tv8rQW8b1fl5LNQ7
5KLkK+jZn7+BlqJ0lJ1oGNN4xfNJnAsY3lIUHX5ADnZPyhff0eL7NMSbzWaOTgoH
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13483820328626968163817665760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 15:55:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-04 15:52:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.iihf.hockey'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24895570387482820509668428057235810201627181727051141239682672882537506341411012243181157156386806303363875447992360180382987400191030177381114682274324772126805843644090192425229805800600477591303981182107209878789417263324721163251945938285253509834438984929269592062374852518431196463429310247835793921375105032931139913728739244485327640346568811426251495351199935378596090497084485049579341153601031397221649293827260246747798086446954935689978772061592641919499649535273858189286916084804796249945156344597030941088308624687708489962843190655456580535604914147927901148097823190064796706549883102047779261384451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iihf.hockey'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iihf.hockey'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48a37d243b9ef684dddbf95341d2483a28c20b53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f2819c1bea23703cd12b77838aee289bddb11b0b9c47989969dae7fd41e725041e51534a3b2daf4c41184f9f38280039259aa35a9062c88fc489388dcf9b55dd0b4400228a8e3a3f4181fc8b2aa536326e1aa40c8a332c5601905cf5cb9612047f9f9dd7a36e32680a46e1e212300e80bdcd9c14c5a8565f7ce20424c48b72cf9c8dce64416b6c9de4a2d472ae5fd9b15df9a255d7cd3d604f2e1e38017202413f48bbd94838c3bb4173894a71593e3998b861479a6606d80c2e28dc94b6304579e2d1648f17442b783e0bd6a628acff6c7c22a7e02f7a76886e1fa78109d7a50bf956148e96b725ec1dc79a13660149c6b6e378a1fc5393b11f5447d6b6a58