*.mynorbu.com

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 15:7c:37:53:2f:58:3b:1b:9b:91:e6:42 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.mynorbu.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 15:7c:37:53:2f:58:3b:1b:9b:91:e6:42
Serial Number (int): 6649353272528318116756842050
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: f0:85:95:2a:4a:d7:34:c1:e1:82:0a:eb:12:9e:68:44:b3:5a:e5:8f
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 1d:e6:2f:ba:eb:fd:62:93:44:6b:f2:b6:df:7d:6c:80:e2:73:76:4b
Fingerprint (sha256): 2d:a3:3c:b4:bb:77:a6:0d:f0:35:87:5c:4f:e5:ff:5a:25:5f:dd:e5:36:1e:26:4b:04:cc:8b:da:6a:65:6d:5b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate *.mynorbu.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mynorbu.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mynorbu.com
mynorbu.com

Other certificates including the domain name mynorbu.com

(limited to 100 certificates)
*.mynorbu.com
atheneasolutions.com
www.mynorbu.com
tafmekrandomizer.onclearning.com
*.mynorbu.com
app.mynorbu.com
www.pigonahill.com
mynorbu.com
www.mynorbu.com
tcsp-chauffage.fr
farport.co
mynorbu.com
iwiz.in
clinicafraternita.drtis.com.br
www.profesyonelcemuhendislik.com
atheneasolutions.com
admin.khetix.com
mynorbu.com
www.pinaxpress.com

Certificate

The complete raw certificate details for *.mynorbu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIMFXw3Uy9YOxubkeZCMA0GCSqGSIb3DQEBCwUAMFUxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH
bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDIzMB4XDTI0MDUzMDE4NDk0
OFoXDTI1MDcwMTE4NDk0N1owGDEWMBQGA1UEAwwNKi5teW5vcmJ1LmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMVfwlJEZBcq8b3bXytO0Wcj4WZN
zy/Vi2MaFJ5gUypkXqI3N+K6Ryuf4pAp9ZMlCaJf4U32S0D4nWM31fIz6Z6YeJJL
mAF8KjP1clP5WQMuq2GoBfojJ7ljmNAqy9dfDvoDH6rwpl+uj2wM259gl3Qlvpj8
9pY3fpTHfF7R5Ew2IO+o2W2U3w4cqmOzxX9RhQCv7fBZ6uaOjvzS0qtj/yorQykZ
9P8P9NsRM4zItaeqlXgMddd0IO85zv1WwqAvfpagXgboq+EIIYb/jlA+n3xskhdM
vxmlS9oVVx0KuN73XL83Q+2d5N+j9szDJejrSctYHX1bbpSW0j3omDulJlFVLGtN
YfNY72jEzWsstcbBY6m0shkYKb4iCn3ILZ18fOitgSUGCpKi9NO+77rb5Q6fHhuZ
TMElxUrfUnEoxgmWhI/LLFtVGjURNI5yzUoKWh9hmls4WTQXgeQDvrtLD/XOUTJt
M3YkEB65UwZgfNVhPJZLqBQVMAir3hqi9GMpnW1KXoDJrH+0wCL5/A5iaqSYwuPl
yJVNMFbCRQ+W5sY88weNqD6EL/Xl8NV2PHkXRIhNpG5FN1P8sca8eFF/AAKz6sPN
P/tRlyBN8pahPYOH4ZrxQSr2OI2fcBYuPO4vqaPpDVVNYTBdD10y9C+aNMRaPKYD
ZAaX2Fqj5rUL9zH3AgMBAAGjggH4MIIB9DAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T
AQH/BAIwADCBmQYIKwYBBQUHAQEEgYwwgYkwSQYIKwYBBQUHMAKGPWh0dHA6Ly9z
ZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZ2NjcjZhbHBoYXNzbGNhMjAy
My5jcnQwPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dz
Z2NjcjZhbHBoYXNzbGNhMjAyMzBXBgNVHSAEUDBOMAgGBmeBDAECATBCBgorBgEE
AaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29t
L3JlcG9zaXRvcnkvMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwuZ2xvYmFs
c2lnbi5jb20vZ3NnY2NyNmFscGhhc3NsY2EyMDIzLmNybDAlBgNVHREEHjAcgg0q
Lm15bm9yYnUuY29tggtteW5vcmJ1LmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwHwYDVR0jBBgwFoAUvQW384qTPHPLefoPhRKhd5YYkXQwHQYDVR0O
BBYEFPCFlSpK1zTB4YIK6xKeaESzWuWPMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQApWYdJvV3Yp4DuRJxSw6WaWi8lAzDxGiiNY15QKR9z
diVhpbl5+Fiq2e12Mb08yCRxdYOF3VJg7743H9ahd96NYrhmUro3t/msOYKGvoFh
yqFo+H2yNU+x+BtgvPvnPk29n1tBM4rzF/CFto1JX78xvgJ4Bt2acFV6x4RyaUJ6
Q7khWAy8xWVN25VLgJonzItvBs1gO6UXQREMhTIAOg2D2ubvMBNxGQ4z4lseiAqs
Aex9rJDqDqNOzJS/AojZgHC+sghgJWrrVaaHXnev2ZmFGEyrDeuM2xD3Z3OraDem
yuvzoFtR/GsfcQAXP3KRDL7CZSrMnz6KTBgO+gnpGhpR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6649353272528318116756842050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 18:49:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-01 18:49:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mynorbu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805215908403471540085878689391319556216829583168584617198531176692061498947349269682941476681587861215077891212477857182574143637885403395299732472778204732251735560579923279056336783114681047640172341469056475789286230987097214884096153070740938950295699452256572563595600683921229898712964852210181004658111898705310785757971065029208256756434762618329401508586047163057355560303219952091194756958157768066248585210034408189246453519070723699561228698185152946376501531393676366032631000904651831509590543560833233178835236990127061007513996387113074867854261599570778056952932773251009368453558407866799525385564352563250289007570232662653537401543068786534535900080809249725265661928276386575098052342451915364107628818843478497432667754031633331523983218260474505947339811692962459847242114557594387558100811671411569892238618440018836162132804244092600908354514459348002122644041894814215373274914805458597495688887546879602249299309299862621648842079222522356001609408275840446863466809919385924631461627837475546272852119225302617463561835261786769433585302789904778770750957188245587252858165552096454041207447164488704298244750085282914856978146051841864010890863651299576639159414414495292003597131878012610028767129580023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynorbu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynorbu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f085952a4ad734c1e1820aeb129e6844b35ae58f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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