www.sameday.ro

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 61:1d:ca:1f:63:4d:1c:1b:6c:dd:19:3d was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sameday.ro,OU=Domain Control Validated,C=RO

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 61:1d:ca:1f:63:4d:1c:1b:6c:dd:19:3d
Serial Number (int): 30056059298473308152777218365
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: f8:f0:15:07:c0:09:6f:12:b6:11:65:4c:a5:69:86:17:bb:ed:d4:09
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 0c:40:3f:04:87:db:ae:ff:11:d4:45:6c:26:2e:d4:83:7e:2b:14:04
Fingerprint (sha256): 37:d4:23:60:9d:5b:90:38:0d:02:7a:bc:ed:ab:88:7e:d1:18:b7:52:84:eb:de:06:3b:0f:86:99:a2:ef:bf:ec

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.sameday.ro

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sameday.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sameday.ro
sameday.ro

Other certificates including the domain name sameday.ro

(limited to 100 certificates)
yofardev.fr
www.funaccuracy.com
wildsolutions.pl
app.tajirx.com
choosy-linking.xyz
www.amifashionbaby.com
*.sameday.ro
www.thoughtsonpaper.co.uk
wojas-bazgrolety.pl
nitish.design
staging.elitetrainr.com
mijn.meerdervoort.com
www.thecoldhearts.band
www.sameday.ro
staging.thewellnessorchard.com
*.sameday.ro
perhapspod.com
www.ycu-hepabiligi.jp
enterprise.sharo.io
dash.management
api.ratemynft.app
stackoverflow.co.za
bhrseguros.com.br
tosauth-testing.tosgame.com
dev.proxy.valuehr.sokuyaku.jp
app.intelly.solutions
www.lucent.homes
*.sameday.ro
www.sameday.ro
skipt.app
t1.billexpense.com
natureclubs.com
cert00070-azurecdn.akamaized.net
www.pro.adtrans.fr
pcsdirectpay.com
nathanielrickertsen.com
cert00070-azurecdn.akamaized.net
user-p3-c1.andikaraditya.cloud
music.mesbro.in
cert00070-azurecdn.akamaized.net
hbreaks.ru
app-hml.bikeware.com.br
www.thecoldhearts.band
partychale.com
www.fulsa.org.ar
anilata.com
www.jackpatrickhickey.com
app.tajirx.com
*.sameday.ro
cert00070-azurecdn.akamaized.net
moldy.sh
chatlocura.com
cert00070-azurecdn.akamaized.net
sameday.ro
staging.johnshortland.com
rajatvishwakarma.in
cert00070-azurecdn.akamaized.net
www.sheremetiev.pro
www.webstrolling.com
api.bastienclement.ch
perhapspod.com
*.sameday.ro
*.sameday.ro
www.areialabs.com
matheny.dev
whats-up-in-the-cloud.se
www.wehatid.ph
auth.kislepesek.hu
portal.usrobotech.com
www.bandquarters.com
www.webunity.live
www.crscript.com
www.hazardhair.com
taco.insightprocessing.com.au
cert00070-azurecdn.akamaized.net
www.sameday.ro
*.sameday.ro
kagacloud.com
manchester-rider-web.basis-test.bike
cert00070-azurecdn.akamaized.net
www.mulabita.dev
cert00070-azurecdn.akamaized.net
rouqiltech.com
cert00070-azurecdn.akamaized.net

Certificate

The complete raw certificate details for www.sameday.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCbxw5yXNmA+1ca2KyyA
nmhbiYf9LlF+kN917ZM6NHiw7ocol//qFvzdlG/8a6X9dO9cootDaJXyESppP3VR
g5U3vluCmfZY+M9cWzs5Ff8c7AidwrvpNLWD32EHRS1n32sP1S0CwNq82aFmQvFh
IKkbBFVbLJzd3bUkIeQEh9GqV4vV7pfHVI5wSENiASHJ6TYSB8JhJ6AGWU2LgbWX
p59AzWxQmlVTJJAinmzPduJ3u2Gb4APK4BWdTkjuXkNyrMDcaoDVQQcJh9V9hoDO
JpNpxmQMsL9SGDPatj85BlQwkdYR0oHbUmkDEVUksb+3HK+fZH4W8DJlO8Nqx3r7
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30056059298473308152777218365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-19 15:11:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-20 15:11:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sameday.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24761911968323110880590031248613383941537921419883393661255569895802051650280670737105376938292988763764331298649576156254485399817454794246761333172737284653137845526489965437670783669855639577546227857462888778890474121573496297788333005116216676987243077016352394309809672397290331325033106581497221163053862734282984695079289702849496270380661861779801129793558094736094456564896913523256482296804144945493592993238098187157241054345840948109396441832493080835665219860207702812391660750713286808393362377715815622872700062389880471257448455106500955466647309323691654971278548174843920424376106752472254437325643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sameday.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sameday.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8f01507c0096f12b611654ca5698617bbedd409
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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