jobs.barco.com

- Barco N.V. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 75:5f:09:a0:40:80:2a:03:4b:5d:16:ad was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barco N.V.

Organization: Barco N.V.
State / Province: WEST-VLAANDEREN
Locality: KORTRIJK
Country: BE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 75:5f:09:a0:40:80:2a:03:4b:5d:16:ad
Serial Number (int): 36324639559385921441815664301
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 07:57:60:da:f3:30:1b:a2:37:61:62:02:fb:a8:f4:cf:46:de:66:e3
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): e8:5f:d9:f9:88:fe:db:09:09:25:27:5a:e9:f5:3d:49:f9:e1:01:4c
Fingerprint (sha256): 37:ea:f4:48:3b:0b:62:85:1e:97:63:35:a8:63:aa:2a:31:51:15:8a:b4:e2:3b:cc:f8:3a:c5:2a:7b:eb:02:f7

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate jobs.barco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jobs.barco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jobs.barco.com

Other certificates including the domain name barco.com

(limited to 100 certificates)
outlet.barco.com
*.uat.eu-west-2.synergi.barco.com
edu.barco.com
*.healthcare.barco.com
ir.barco.com
ar.barco.com
*.preprod-10x.ads.healthcare.barco.com
*.healthcare.barco.com
*.qa.ads.healthcare.barco.com
sni.cloudflaressl.com
smartuptv.com
barco.support.com
edu.barco.com
*.cloud.barco.com
*.devitp.ads.healthcare.barco.com
test-serviceportal.barco.com
link.socialsharing.kbccorporatebanking.be
access01.barco.com
maintenance.cloud.barco.com
*.cloud.barco.com
*.sandbox.synergi.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
cl.sw-t.ch
barco.support.com
*.barco.com
www.register.barco.com
*.dev.synergi.barco.com
*.healthcare.barco.com
*.barco.com
modmed-mock-fhir.devops.ads.healthcare.barco.com
*.store.barco.com
us.cc.barco.com
store.barco.com
edu.barco.com
store.barco.com
go.barco.com
*.healthcare.barco.com
demetra.barco.com
*.barco.com
barcozone-compliancetest.be
*.eu-west-2.synergi.barco.com
auth.barco.com
*.healthcare.barco.com
insights.barco.com
store.barco.com
cc.barco.com
demetra.barco.com
service.medical.barco.com
discover.barco.com
forwrd.it
university.barco.com
qa-web-backend.barco.com
*.uat.synergi.barco.com
ar.barco.com
cl.sw-t.ch
web-backend.barco.com
*.healthcare.barco.com
insights.barco.com
*.prod.ads.healthcare.barco.com
www.trynow.barco.com
*.synergi.barco.com
*.healthcare.barco.com
ram.barco.com
*.preprod-10x.ads.healthcare.barco.com
infopages.barco.com
secure.barco.com
edu.barco.com
*.cloud.barco.com
jobs.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
cl.sw-t.ch
www.register.barco.com
*.barco.com
*.barco.com
infopages.barco.com
*.healthcare.barco.com
store.barco.com
*.healthcare.barco.com
sni.cloudflaressl.com
cc.barco.com
*.healthcare.barco.com
us.cc.barco.com
event.barco.com
*.healthcare.barco.com
activate.barco.com
*.prd.eu-west-2.synergi.barco.com
*.store.barco.com
ir.barco.com
*.preprod.ads.healthcare.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
us.cc.barco.com
*.prod-14.ads.healthcare.barco.com
ar.barco.com
*.barco.com
edu.barco.com
*.dev10x.ads.healthcare.barco.com

Certificate

The complete raw certificate details for jobs.barco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbKy50bknzqBi/UuybtW
oFumjoe6IBKBo5FXYJl/SchRG0JbsXhYTGxIhRE9GRs3FJyp7ugElJLA/IFkHMkW
V+vpNW1XMS3mUW7vc/d75V5S/JZgCAkg+GOIMlYZKN0v0HSnwZCvQHHc6Reo4eeR
kz1eBq8b1HALmXE5OU78X7U7lqdUB6CKmNqF+TB16rwJvt/jsoXeUg9uy3Jziilo
5PtxVohUffGyE49Bk8Aq2kSitvI1HnZv/kLDc9WvIxYhzy6wjBKEhqwajKayyYu5
asgpxZGdHDSih78EYnNxTIxj8AT0Bog2HUlHhxx+DylxwLyXIST0ZxhRHxADKWyi
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36324639559385921441815664301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 13:12:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 11:21:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WEST-VLAANDEREN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KORTRIJK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barco N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jobs.barco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21927346442140228322077536020063240801298951332269800022259983799369787082375473324128481400346643236302946050979937918961035106922566578282686105686705916051796249852599825644993876413525937339782647078441071068971074160324659297133289622665944960533608141076369409201873107688506339835299457371613771988878623737045307760493785318736136558803465595718062052399081440621953614061443137096468038587483317717662075961159903394870229082669914254656178141326691863730475021246556315880130128921706876719269543092323235002776014952476509321046494446918169526059401499308329600270883248144338558755827886087040139220787797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.barco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							075760daf3301ba237616202fba8f4cf46de66e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001886cc996460000040300483046022100fb99077ccbc72ea5016a8ccb5b3eee497ddc54a269b27b58bfced2d6fd44ffe3022100f0a271ac99339ef966442f9c4fceab221ac656638c8636a6409135b1f7a98d5000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001886cc9956600000403004730450220525f3a83d502cea0c1eab29d3d1dcdb85654df7f31755ed42f6e6c5c1602416c022100f14d184a0c732838913d6ce00631bfdceac3d5c3cfcf3ec41b59c0dd9e8b914c007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001886cc995e5000004030046304402201ef1f365500b4454062754d5c5cffa769d80ed640fd7716545286fffb7748920022019dc891aa1549b73c6d15ec75871a37fa079c32338e779fd1a054913a692df2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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