www.dentalponta.com

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 61:ad:fa:74:de:62:2c:bb:d7:ec:1a:8f was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dentalponta.com,OU=Domain Control Validated,C=JP

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:ad:fa:74:de:62:2c:bb:d7:ec:1a:8f
Serial Number (int): 30230372866931252084570069647
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 3a:aa:1c:37:95:6b:f3:fd:3f:2c:e2:96:21:1b:82:5c:ac:19:61:36
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 1c:62:3b:de:8c:fb:14:76:d7:5a:26:b5:44:7f:7b:bd:94:be:07:fd
Fingerprint (sha256): 30:77:00:42:fa:ac:47:fb:32:5b:6b:74:33:a7:7d:2c:28:25:d9:6a:a5:67:59:8a:89:62:10:0f:11:28:83:f4

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.dentalponta.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dentalponta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dentalponta.com
dentalponta.com

Other certificates including the domain name dentalponta.com

(limited to 100 certificates)
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com
www.dentalponta.com

Certificate

The complete raw certificate details for www.dentalponta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z8VTUMk4tVwmH0JPuEL
JTj0wU7XrENcYiaN0P8lRtoKRc/20xqL2hPrF6mlCbwhhkbOOYLG36IDWld0ZXCd
W84r1GQZe9wXyXnIDOmVz3i7TO802bkJifwV9El9zAkYPDCXKyRjo7NhgvFQh2/e
EUBtT7Bz9xfC/n5Wk9fujAKXmOrZUjWpkZ29wbAZ99XBQVq6zgxT69xRIJDbJu31
FeaphNEE/ZKqTplEOxhIbk034KBNNBKkoElXGgXIUla4kVDnnIXJLm8IOO7dfTrh
j6BOtY4SwN08ad8CzPwk1nIHtqdzDaCoro26/Dhx05QGmuWx9LAwvh8xQ/ZovTmC
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30230372866931252084570069647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-31 08:43:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-08 02:48:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dentalponta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28687202717626543783011812184541908913021686177650410277073013874405625266951626366924826620086816179775187249405096324767452465052535061723166874668200307563910458079558333790925608613246729147103365177349409154385652500054285673271851906424577398911352111950472959453451120565658574454425607318685484618973738674144503618831432626707281533050634067470848058844245531908812679055992453973397136067755463698244704572394717920772105924667067086489290631308698544491950167524336695902531605664407149471555350061633384199191228600331665966026191299518550118570872866383587548425355845275454529231121822234062127709651603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentalponta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalponta.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3aaa1c37956bf3fd3f2ce296211b825cac196136
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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