ides.zedra.com

- ZEDRA GROUP SERVICES LIMITED -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 47:52:ee:b8:cd:68:86:7d:54:36:b6:d5 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ZEDRA GROUP SERVICES LIMITED

Organization: ZEDRA GROUP SERVICES LIMITED
State / Province: St Helier
Locality: St Helier
Country: JE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 47:52:ee:b8:cd:68:86:7d:54:36:b6:d5
Serial Number (int): 22073694946748960058098759381
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 10:75:a9:3a:67:84:89:87:63:3b:31:04:ea:f7:f3:48:33:3c:8c:9b
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): fd:18:8c:f5:35:53:13:84:f7:62:29:44:1e:fa:90:06:e3:87:cc:a3
Fingerprint (sha256): 2c:ab:a6:23:cf:aa:2c:7e:14:d4:a0:aa:da:c6:30:96:fa:ca:54:68:cb:c1:f8:99:55:93:c3:f7:2c:a1:a8:57

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate ides.zedra.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ides.zedra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ides.zedra.com

Other certificates including the domain name zedra.com

(limited to 100 certificates)
zedra.com
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
helpdesk.sicom.mu
ithelpdesk.oneplm.com
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
sdpcloud.netwarx.com
servicedesk.collen.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
ithelp.mhphotels.com
sdp.dilloneustace.ie
helpdesk.aerocompact.com
helpdesk.bedes.org
servicedesk.buildmat.eu
servicedesk.bat-agrar.de
helpdeskittest.zetes.com
aiseait.fuchs.com
zedra.com
zedra.com
helpdesk.hambroperks.com
itservicedesk.zedra.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
ides.zedra.com
servicedesk.jmlgroup.co.uk
assist.pentest.partners
aiseait.fuchs.com
servicedesk.bwbconsulting.com
itservicedesk.zedra.com
noc.servicedesk.as
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
assist.pentest.partners
assist.pentest.partners
servicedesk.medica.ie
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
zedra.com
assist.pentest.partners
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
ithelpdesk.rev-log.com
sau.solarprofit.es
zahelpdesk.glencore.co.za
assist.pentest.partners
helpdeskittest.zetes.com
zedra.com
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
itservices.tecpartnership.ac.uk
helpdesk.bedes.org
aiseait.fuchs.com
ithelp.mhphotels.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
servicedesk.tms-cardiffgas.com
servicedesk.procentia.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
servicedesk.winfieldunited.co.za
helpdesk.bellagroup.dk
helpdesk.saviaantjes.be
assist.pentest.partners
itservicedesk.eldoradogold.com
zedra.com
support.servicesforeducation.co.uk
helpdesk.vista.ch
assist.pentest.partners
helpdesk.nationalcaregroup.com
*.zedra.com
sistemes.accio.gencat.cat
zedra.com
ictportal.linkfinancial.eu
helpdesk.minitab.com
ithelpdesk.rev-log.com
sistemes.accio.gencat.cat
sdp.vdp.com
ithelpdesk.rev-log.com
assist.pentest.partners
servicedesk.procentia.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
helpdesk.sicom.mu
sni.cloudflaressl.com
helpdesk.nationalcaregroup.com
assist.pentest.partners

Certificate

The complete raw certificate details for ides.zedra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ4se92JSKP8q5xiZYoK
1FakcvAxeqtmdgpq1wgzzTjM/QAd1YFTQkN9pv8DhP9Xw5tbIUvh5kMooZ3tGes6
Azwybv4hq17Fwc8OihqVk01x6OI4laDxWYG2tvjgam2xnkuj4jOtQFkwitYlbUv/
xotJ/hCY9WMMlHBwv6WqTMRRYxWg1izXYOKaGZ6CCRVik8coKJg6nCx9Unge1Y6B
kqok0/uamwqrY8DpwkBiboAaPqeo09mQF0HNtcyda6e/kScrLgiSzFz6yhNr65zN
xZTj3CEA5YnSeqqiBpkDYPSruLA4qJmEQtK392Npw6t+rTgl0VUgwqAu3XRUFdNs
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22073694946748960058098759381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 06:33:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-23 06:33:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZEDRA GROUP SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ides.zedra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23866028982620575773710208795621416739236591483050694872452444858856089205595198777777651392963769753661638827489539616096579180460207341814470287671755079742243850592237898403013937941254311647429322868303925434081581271920331855327358126225658881086624351522674525519341264266134808038271762813989167275195376300486156508873582773854834155815818351952089780857848302620078956104339906646029957715105534373392927581893803645377552103530807476574959905478820267291482641259583726853790892211081847449378492520242614738101604542092441190842333775941231124999591108541497201858475990664861565726971550165202013688917227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ides.zedra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1075a93a67848987633b3104eaf7f348333c8c9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a315d45a161991cbbec5e5e2e2204dd156b02e132c8aef36045a0608babdc0cc1bcd4af419cd3c6c81b0f174e59a00723dd0d96aaad89172074b784bf5e61185d064a1dc3d8b8e6d710ea6fd46034b91591aecba9a21cca837691f40199211d5c9ed47eb933cc83e360bc4f0d8e64bf4700a8aedf0b85946b950b15b837347e2624aa6609f1bc91f724c57e571e0bee2e833ad16df0d6af68e7268ff1cf369be83eb00872c966d3b1368e6f4c1e25b79d148119a82db0f2719f80a68b5236269f376cec0b314be6b0fdb3c90573a1ef75a4b1f070ec9f5fc7633ed9085680f046fe560c896c6d9aba9bb86bc68bf2e08c84d42c99c5ec57a750f138baa7b9938