wwk.i-csr.net

- Applied Systems, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:35:be:26:c0:54:1b:19:a4:71:3a:1b:87:4e:d3:38:4b was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Applied Systems, Inc.

Organization: Applied Systems, Inc.
State / Province: Illinois
Locality: University Park
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:35:be:26:c0:54:1b:19:a4:71:3a:1b:87:4e:d3:38:4b
Serial Number (int): 1492209615354464286089827914629289992206411
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: bf:3d:23:df:a4:f6:d2:2d:ec:9b:71:b1:a8:b9:bf:51:69:84:9d:71
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): c2:42:e7:93:c1:de:ec:74:05:32:32:6f:47:71:37:f9:d6:6f:13:13
Fingerprint (sha256): 2c:59:cd:8d:07:6b:c6:1a:05:2c:0f:3c:88:93:6b:62:5b:6a:44:66:38:5b:37:fb:df:ec:56:73:cb:88:e8:8e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate wwk.i-csr.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwk.i-csr.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwk.i-csr.net

Other certificates including the domain name i-csr.net

(limited to 100 certificates)
*.i-csr.net
wwi.i-csr.net
wd03.i-csr.net
wwe.i-csr.net
sni.cloudflaressl.com
wd15.i-csr.net
wd05.i-csr.net
wd01.i-csr.net
treiber.i-csr.net
wwm.i-csr.net
ww8.i-csr.net
wwh.i-csr.net
wd03.i-csr.net
www.i-csr.net
wwc.i-csr.net
wd02.i-csr.net
ww6.i-csr.net
wwi.i-csr.net
ww8.i-csr.net
i-csr.net
wwo.i-csr.net
wd01.i-csr.net
*.i-csr.net
ww3.i-csr.net
wwc.i-csr.net
wwh.i-csr.net
*.i-csr.net
ww7.i-csr.net
i-csr.net
wwc.i-csr.net
wwl.i-csr.net
wwa.i-csr.net
wwk.i-csr.net
xdc.i-csr.net
wd11.i-csr.net
wwd.i-csr.net
ww6.i-csr.net
wd04.i-csr.net
wwc.i-csr.net
ww3.i-csr.net
ajg.i-csr.net
wwn.i-csr.net
*.i-csr.net
usi.i-csr.net
wd01.i-csr.net
ww7.i-csr.net
wwd.i-csr.net
wd05.i-csr.net
ww4.i-csr.net
usi.i-csr.net
www.i-csr.net
ww6.i-csr.net
wd12.i-csr.net
wwg.i-csr.net
wwo.i-csr.net
wwa.i-csr.net
wd12.i-csr.net
wwn.i-csr.net
ww7.i-csr.net
wd05.i-csr.net
*.i-csr.net
wwe.i-csr.net
ww9.i-csr.net
ww9.i-csr.net
*.i-csr.net
wd04.i-csr.net
wwh.i-csr.net
wwe.i-csr.net
ww6.i-csr.net
wwa.i-csr.net
wwg.i-csr.net
*.i-csr.net
wwd.i-csr.net
wwk.i-csr.net
wwb.i-csr.net
allied.i-csr.net
*.i-csr.net
wwa.i-csr.net
wd02.i-csr.net
treiber.i-csr.net
wwm.i-csr.net
wd16.i-csr.net
*.i-csr.net
wd04.i-csr.net
wd10.i-csr.net
ww8.i-csr.net
wwc.i-csr.net
wd04.i-csr.net
wwg.i-csr.net
demo.i-csr.net
wwk.i-csr.net
i-csr.net
wd01.i-csr.net
ww9.i-csr.net
wd05.i-csr.net
i-csr.net
ww3.i-csr.net
wd03.i-csr.net
ajg.i-csr.net
wd05.i-csr.net

Certificate

The complete raw certificate details for wwk.i-csr.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBJ6A+do7pYBwYyrsJvx
LZpabrSyjalSN7PukEQRNP2EffHlYl4Xk+KIyyEHxjKG5eZ0NUga+7WvvXroKsoW
2Ikz/gq7o3F+uQ/HPRdRiqZBfdgpj0FbtMDudbssxsJNml0oY8i6co4jREJlrjvH
z6g1C0iBCP5wNVMylE/Qi3e/7Jw2+yW65/4LCL+HQXKClgmyX6yP7cwQXEy+obL1
zKCDIR+ggMdTs2ZbMrmJ2cN8YoWIWXqekywyjyabo10jvLekpY7u0h50kmisq4lj
DzKVQmRXnJMDk6hpz6LIzRNUpWZnrr5xhTClSmQHVUymt3CZCqPa1gi3cpArHA+O
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492209615354464286089827914629289992206411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-29 13:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Applied Systems, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwk.i-csr.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23741912495539132524305520674820892782729204184594723824700254489673627111585606080334669026811381696199778019901961745237355363042994640997743797668403700463032376106611315282665465954762900448091872990854773763429104983144960253418750380463183126403776799932291805290581476087779363176410590815929213561244157849451853106245286511302332130268722436873503592394151782453286147077698202839570529827715537842130205477865437011633305449005477563435238911404950210995673720262968288556498196652536917544515825712667508322934076629557325824722378403895937448289985666771477615023179272550596988574889070096521392196390409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwk.i-csr.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf3d23dfa4f6d22dec9b71b1a8b9bf5169849d71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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