*.tools.optimaweb.ca

Issued by AlphaSSL CA - G2

About this certificate

This digital certificate with serial number 11:21:34:d6:5f:4c:38:49:b7:1c:b3:00:3d:e0:77:04:6e:64 was issued on by AlphaSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.tools.optimaweb.ca,OU=Domain Control Validated

AlphaSSL

Organization: AlphaSSL

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:34:d6:5f:4c:38:49:b7:1c:b3:00:3d:e0:77:04:6e:64
Serial Number (int): 1492208411888491377340251237782105201340004
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 54:d0:18:9c:b1:78:af:34:10:6d:e3:fd:bb:72:91:a1:71:50:32:74
AuthorityKeyId: 14:ea:19:55:f0:0e:0d:32:c6:1f:74:33:b7:8e:66:1a:4c:12:31:1e

Fingerprint (sha1): 3e:a9:55:3b:ab:45:cc:16:13:2a:10:33:d0:9a:4f:ef:18:4f:fb:d7
Fingerprint (sha256): 34:68:38:2f:28:ee:b1:0d:83:52:ed:a7:a8:53:65:9a:8b:b7:99:41:22:9a:a3:78:97:f5:f1:7c:d7:f2:a7:ed

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphag2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphag2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphag2.crl

Check the revocation status for certificate *.tools.optimaweb.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tools.optimaweb.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tools.optimaweb.ca
tools.optimaweb.ca

Other certificates including the domain name optimaweb.ca

(limited to 100 certificates)
mail.optimaweb.ca
gitlab.optimaweb.ca
optimaweb.ca
gitlab.optimaweb.ca
gitlab.optimaweb.ca
optimaweb.ca
gitlab.optimaweb.ca
optimaweb.ca
gitlab.optimaweb.ca
*.tools.optimaweb.ca
gitlab.optimaweb.ca
optimaweb.ca
gitlab.optimaweb.ca
optimaweb.ca
gitlab.optimaweb.ca
registry.docker.rd.phenixweb.com
optimaweb.ca
gitlab.optimaweb.ca
gitlab.optimaweb.ca
gitlab.optimaweb.ca
gitlab.optimaweb.ca
optimaweb.ca
optimaweb.ca
optimaweb.ca
gitlab.optimaweb.ca
optimaweb.ca
gitlab.optimaweb.ca
*.optimaweb.ca
optimaweb.ca
optimaweb.ca
optimaweb.ca
svn.optimaweb.ca
optimaweb.ca
optimaweb.ca

Certificate

The complete raw certificate details for *.tools.optimaweb.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492208411888491377340251237782105201340004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-29 22:26:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-30 22:26:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tools.optimaweb.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784210033479949566410643659761601254925847158346745148307042090968329846701861562096309750330407528534694830513331063224979595100007237537598779759132911511941074070259830250318652548020079245256413467093757758084729306240845073515736724303454674362249915878309320950911665207415451544413481660926124645052211392263340130248001603793899952254406608509472561878205692977262550348647895017863163491684087233480572043386338620181718047756246380633119632670087365553013342576655071752034967367017298086304387516107024116924036883160373512023389161119547432418972465290178054461259280689937414863657706464970006580149134544651888374300887432124272440949127628417856871564427182812753826765506610135298622976167856654647388183494869722325887603967652298574703669374175986465115953203450959667953039965519816293326074901648077656121250894995425193394589071496874411559476674076288162945426931460514996226731221096569135106861938849047240474100889702264532175374360846428906329587637405465353173927987809237197334138846205955809382328453919612108471301553535045548576678956338876417316476717119806818466397449179083651426706898629839373482321614956830493158722044903336387881803791340747760192135219874788730686728816765207367642544784125011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tools.optimaweb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.optimaweb.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphag2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphag2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54d0189cb178af34106de3fdbb7291a171503274
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14ea1955f00e0d32c61f7433b78e661a4c12311e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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