expe.adha.gov.ae

- Department of Government Enablement -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7c:c0:3e:ca:c8:52:34:c0:e7:23:0e:fe was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Department of Government Enablement

Organization: Department of Government Enablement
State / Province: Abu Dhabi
Locality: Abu Dhabi
Country: AE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 7c:c0:3e:ca:c8:52:34:c0:e7:23:0e:fe
Serial Number (int): 38608551502611695889541172990
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 94:91:98:4f:5c:31:b7:22:f5:61:1e:e1:0a:78:cc:a6:6c:4b:7a:6c
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): dd:40:b9:fa:43:4f:7c:0e:02:dd:58:9f:3e:e2:d1:dd:af:9e:c6:8d
Fingerprint (sha256): 2f:df:b2:23:fe:e1:5b:30:fb:e3:a4:04:05:37:3e:83:c3:6f:a3:01:b7:09:14:5d:7a:b7:b8:7e:a7:c4:c3:d6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate expe.adha.gov.ae

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expe.adha.gov.ae

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expe.adha.gov.ae
expc.adha.gov.ae

Other certificates including the domain name adha.gov.ae

(limited to 100 certificates)

Certificate

The complete raw certificate details for expe.adha.gov.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38608551502611695889541172990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 11:51:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-21 11:51:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Government Enablement'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expe.adha.gov.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746326601313722818141846308527547777619159898604120555169959806051208807317064021971407976471645458211390650640103557863557989734247549208323614493610037479668373338570154670618511876409700152507656405659757021396742962900239934899432821398761804884733146573633664597997766338721219988193720646792260769873288287103375035646156194678978177176908347042648292008134529252083122079102585946287723429260106781678248201187179404648587077649227385065092595751746643177543701150185264760177769863655705795154472076367453626982937764769921897950808107516309375599208492299096681952122651567588604465596261993735383409883652223573057231950277028730491694942777393808625328965606391659502913900942715904449862814949513545312434531171076857431990652413426017119466751257497373258972831557226868879722550474531343026277408321103449399081379313393460129834318760670147659863438550234601582591831435975727060784456019905871334386169702452571369411148204349192434728279703711591106849191175872538552702143677163645763917755889323132298218536850966994164961541935670563950768181453523945479186637249477502993618778121419095923388028204736250384165463541044283054303905321351027868357267643956042362058275764041565829868613500430541038006124807695867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe.adha.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expc.adha.gov.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9491984f5c31b722f5611ee10a78cca66c4b7a6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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