o2d-planboard.hme.tkelevator.com

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:6b:6a:59:47:16:6b:6b:22:15:e9:86 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=o2d-planboard.hme.tkelevator.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:6b:6a:59:47:16:6b:6b:22:15:e9:86
Serial Number (int): 439342290249916867019139462
Serial Number lenght: 89 bits, 12 octets

SubjectKeyId: 6c:01:2b:d9:99:dd:f9:bc:da:5d:11:e4:97:38:cf:7d:f1:e6:25:c1
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): b6:66:e4:33:db:44:10:8f:84:56:5e:c8:38:a3:41:9d:63:b7:f0:72
Fingerprint (sha256): 33:22:05:c3:ba:d2:e2:c1:39:42:77:33:f2:c0:0a:e5:73:53:2e:b5:13:b5:c7:97:b5:42:b5:5e:4b:db:43:e0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate o2d-planboard.hme.tkelevator.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for o2d-planboard.hme.tkelevator.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

o2d-planboard.hme.tkelevator.com

Other certificates including the domain name tkelevator.com

(limited to 100 certificates)
US-1157017-icipi.des.tkelevator.com
totem.tkelevator.com
FR-33169498-xpu.des.tkelevator.com
US-616625-icipi.des.tkelevator.com
ES-33200564-xpu.des.tkelevator.com
efactura.pre.poc.es.tkelevator.com
GB-754914-xpu.des.tkelevator.com
ESGW21514-max.des.tkelevator.com
US-2449-xpu.des.tkelevator.com
insight.thyssenkrupp-elevator.com
US-1380915-icipi.des.tkelevator.com
solarwinds.tkelevator.com
*.genesis.tkelevator.com
ap-sc-app-dev.tkelevator.com
av000ewe.sap.tkelevator.com
DE-33121233-xpu.des.tkelevator.com
PL-671171-xpu.des.tkelevator.com
scc-app.uat.tkelevator.com
BR-33316187-icipi.des.tkelevator.com
PL-726403-xpu.des.tkelevator.com
US-1371379-mripi.des.tkelevator.com
ea.myportal.tkelevator.com
US-1157017-icipi.des.tkelevator.com
ES-739572-xpu.des.tkelevator.com
TEGW21443-max.des.tkelevator.com
carl-prod.tkelevator.com
scc-app.perf.tkelevator.com
PLGW168401-max.des.tkelevator.com
legacyaccount.tkelevator.com
US-1384633-xpu.des.tkelevator.com
TE-755455-icipi.des.tkelevator.com
ea.myportal.tkelevator.com
DEGW8121-max.des.tkelevator.com
sc-uat.na.tkelevator.com
towerrun.tkelevator.com
spres-test.tkelevator.com
US-1371379-icipi.des.tkelevator.com
BRGW198441-max.des.tkelevator.com
US-1371379-mripi.des.tkelevator.com
testldesc.tkelevator.com
ATGW167281-max.des.tkelevator.com
TEGW199591-max.des.tkelevator.com
US-34411047-icipi.des.tkelevator.com
portal-fr.tkelevator.com
ap-sc-acetestui-uat.tkelevator.com
ES-719360-icipi.des.tkelevator.com
wv000sfd.sap.tkelevator.com
US-1371379-icipi.des.tkelevator.com
US-1371379-icipi.des.tkelevator.com
744086-IG-4-bipi-1.des.tkelevator.com
b-design-evolution-pre.tkelevator.com
US-1371379-mripi.des.tkelevator.com
US-34411047-icipi.des.tkelevator.com
USGW21522-max.des.tkelevator.com
status.greenewx.com
US-1371379-mripi.des.tkelevator.com
employeeportal.nl.tkelevator.com
myinfo.ap.tkelevator.com
PL-671171-xpu.des.tkelevator.com
US-3609-icipi.des.tkelevator.com
US-1227524-icipi.des.tkelevator.com
US-1012486-xpu.des.tkelevator.com
*.mf.es.tkelevator.com
ESGW198689-max.des.tkelevator.com
USGW21480-max.des.tkelevator.com
USGW198545-max.des.tkelevator.com
ESGW16577-max.des.tkelevator.com
*.aftersales-hh.tkelevator.com
prodconfigdev.na.tkelevator.com
BR-1451173-xpu.des.tkelevator.com
DE-108712-mripi.des.tkelevator.com
US-1157017-xpu.des.tkelevator.com
visipass.tkelevator.com
GB-33169557-xpu.des.tkelevator.com
US-1380914-icipi.des.tkelevator.com
86194-IG-1-bipi-1.des.tkelevator.com
DEGW8147-max.des.tkelevator.com
ES-745966-xpu.des.tkelevator.com
USGW21529-max.des.tkelevator.com
portal-fr-test.tkelevator.com
e-design-synergy-pre.tkelevator.com
US-2449-icipi.des.tkelevator.com
USGW199444-max.des.tkelevator.com
pki.tkelevator.com
BR-33211597-mripi.des.tkelevator.com
US-1157017-xpu.des.tkelevator.com
plan-evolution.tkelevator.com
ESGW12337-max.des.tkelevator.com
458757-IG-10-mripi-1.des.tkelevator.com
ehs-training.tkelevator.com
US-2449-icipi.des.tkelevator.com
wv000sfp.sap.tkelevator.com
23622-IG-1-mripi-1.des.tkelevator.com
ESGW199849-max.des.tkelevator.com
FR-746625-xpu.des.tkelevator.com
ap-sc-app-dev.tkelevator.com
DE-33121204-mripi.des.tkelevator.com
c-design-synergy-pre.tkelevator.com
US-616625-mripi.des.tkelevator.com
isrvr-dev.na.tkelevator.com

Certificate

The complete raw certificate details for o2d-planboard.hme.tkelevator.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJiWK8oTNExxCcNZVjyc
+sL6TSRkrRqaiL/i7XNJuO7NapYWYzYjUxKGvNIoR9ESzcLsPgRUImgRCnVi1HZr
s14038KkFLrDQWLrw0jE7hJaarc7H6udqqVRsEbAd1yuM5mQDTMrNERW4KaNpNHs
n016QyrCgIOFFu8YnK2V81o8D6Cpm5Ca6tyTIZb1sU3LAv2Aoi2364+8xJka4Dwz
7iU7ZXo0ykV47ncFTFrAMy/zwAEDrmtI87eOe/RN+3IyoFc2i8DCUctPOqbpgC+v
sxDJWyC8G0nUDfQ6vH6PqF/WOusadhn04e0tBnzOoFaQ8aLH6vYlk1qZAMjCDMun
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 439342290249916867019139462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 08:48:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 08:48:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'o2d-planboard.hme.tkelevator.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25322904252823543766535089389188307453286099183454937296947153981680789096282534698422017586967925649617179701269128504765336464334330433777510828457939453037728673099519786593626055311691770736889464527565404273031252428294446397996555297664345234280888798860713932372943872888657696356939523238645896806633371388239012324572515520037941274410738145447462303841363461428291224595658640619225390669244676000126487079286314082053287368165853954765947406633294654652943624478515023048854718488073035923931074316908814689181336140431738001927211790028470262385782041717697674936674313248589799705932888835733845611095907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2d-planboard.hme.tkelevator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c012bd999ddf9bcda5d11e49738cf7df1e625c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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