www.centaurmedia.com

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 69:65:50:93:a6:32:53:f9:3b:fe:cb:d5 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.centaurmedia.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 69:65:50:93:a6:32:53:f9:3b:fe:cb:d5
Serial Number (int): 32618408051988044858718604245
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c0:1b:29:26:ba:75:e3:2c:48:1a:c2:37:ae:49:6d:d7:04:99:42:85
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 8f:43:a1:12:8b:df:84:93:cc:24:44:28:7a:0d:72:3c:5b:68:7f:f8
Fingerprint (sha256): 35:ea:e0:df:7e:81:3b:f2:25:0a:32:1d:4c:7e:a5:7a:a7:2f:52:7b:0f:61:e5:d7:4a:c0:3f:02:5c:4d:16:fb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.centaurmedia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.centaurmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.centaurmedia.com
centaurmedia.com

Other certificates including the domain name centaurmedia.com

(limited to 100 certificates)
helpdesk.azdelta.be
help.cei.com
help.cei.com
centaurmedia.com
*.centaurmedia.com
*.centaurmedia.com
help.maxwellhealth.com
helpdesk.azdelta.be
hello.centaurmedia.com
fsus-3.freshservice.com
fdus-23.freshdesk.com
centaurmedia.com
fdus-23.freshdesk.com
www.centaur.co.uk
fdus-23.freshdesk.com
help.cei.com
helpdesk.azdelta.be
click.mail.centaurmedia.com
help.maxwellhealth.com
fdus-31.freshdesk.com
help.oac.cdlib.org
akamai-san98.exacttarget.com
help.maxwellhealth.com
helpdesk.azdelta.be
view.mail.centaurmedia.com
hello.centaurmedia.com
help.oac.cdlib.org
helpdesk.azdelta.be
fdus-23.freshdesk.com
centaurmedia.com
ad.designweek.co.uk
centaurmedia.com
fdus-23.freshdesk.com
hello.centaurmedia.com
ad.designweek.co.uk
centaurmedia.com
fdus-23.freshdesk.com
akamai-san98.exacttarget.com
hello.centaurmedia.com
help.maxwellhealth.com
help.cei.com
akamai-san98.exacttarget.com
centaurmedia.com
akamai-san98.exacttarget.com
help.cei.com
*.centaurmedia.com
*.centaurmedia.com
fdus-23.freshdesk.com
centaurmedia.com
akamai-san98.exacttarget.com
www.centaurmedia.com
fdus-23.freshdesk.com
fdus-23.freshdesk.com
seguromedico.adisa.cr
*.centaurmedia.com
fdus-23.freshdesk.com
help.maxwellhealth.com
www.centaur.co.uk
hello.centaurmedia.com
ad.designweek.co.uk
hello.centaurmedia.com
theengineer.co.uk
www.centaur.co.uk
fdus-23.freshdesk.com
centaurmedia.com
centaurmedia.com
hello.centaurmedia.com
fdus-23.freshdesk.com
theoystercatchers.com
help.cei.com
help.maxwellhealth.com
www.centaur.co.uk
akamai-san98.exacttarget.com
fdus-23.freshdesk.com
fdus-23.freshdesk.com
www.centaur.co.uk
centaurmedia.com
help.cei.com
*.digitalteam.co
akamai-san98.exacttarget.com
help.maxwellhealth.com
helpdesk.azdelta.be
help.maxwellhealth.com
ad.designweek.co.uk
theoystercatchers.com
ad.designweek.co.uk
help.cei.com
www.centaur.co.uk
ad.designweek.co.uk
helpdesk.azdelta.be
ad.designweek.co.uk
help.maxwellhealth.com
ad.designweek.co.uk
help.maxwellhealth.com
micollab.centaurmedia.com
helpdesk.azdelta.be
help.cei.com
help.oac.cdlib.org
helpdesk.azdelta.be
help.cei.com

Certificate

The complete raw certificate details for www.centaurmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K9H6LS1Cug1OjbmgaY5
vGlQryRsevopclrRjef8MYc6vat9yHGrMpE5adMco9eGrYSPPucC1kKuh9ZUomPv
7eisZcRRCzMsSKdOKARj34PzYeBXgSZX1jR7Om2+P1Yn659oAx83IfCOVDmQqGYf
nTIqQDvqSZuKMOej6LO8g8hyhcfHtjdhXOZLSJ/56dzFQapHHBNQ3UmrZb71QKqD
qAWAnnIRLJ0N+ZqL4w7CPz6+No+yJCkRJ6qEiGrUQo5T8nZbnKAY9pz/TEb0Dvlm
NFNCk2nTPo3rYW+sVdN2msKcUh8L2RV7QZHBQ9OHSxPhWiyjZnS1qKSP0pCGbYrP
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32618408051988044858718604245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-20 07:37:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 07:14:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.centaurmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26344001663495643673764618411423608607280887833342778429432173060623348912365185214646463917613748290868820940278385029564627756391295806248076943368149573994155085018022953595890368345175545917953478938658801288875661988463360858063969138506010853840842099151734215854410846420882166077622012684378137353661499151944908761011146881282083779069553443450968353513705641782118181938726902926146533552815326644159725402875218628749154065432616925432005743321462987926541744270480139689948724296468660274307692825816598813128339515282531625638305652057909507323600436348144348940002841731570073366937780655191410105569039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centaurmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centaurmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c01b2926ba75e32c481ac237ae496dd704994285
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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