www.data-for.com

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3f:4f:f5:b9:bb:0a:0a:a9:6d:6e:ed:2b was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.data-for.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:4f:f5:b9:bb:0a:0a:a9:6d:6e:ed:2b
Serial Number (int): 19594221164407848291468766507
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a3:33:a8:70:62:77:ff:24:20:46:d4:2b:66:57:e7:da:96:16:c9:55
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): dc:e2:ae:26:dd:02:99:27:f6:54:35:f7:77:2e:ca:5c:25:12:17:0b
Fingerprint (sha256): 37:ed:f0:05:84:62:86:7c:ad:0a:71:90:b8:8d:d0:7a:c4:40:d4:a4:71:95:21:58:f9:91:46:26:a0:4a:3f:73

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.data-for.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.data-for.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.data-for.com
data-for.com

Other certificates including the domain name data-for.com

(limited to 100 certificates)
www.data-for.com
app.mannheim-forum.org
timy.pointer2.com
www.data-for.com
lizachan.com
console.data-for.com
mqz.dk
istp.anjaconline.org
istp.anjaconline.org
arihanttradingco.in
console.data-for.com
resume.severin.jp

Certificate

The complete raw certificate details for www.data-for.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19594221164407848291468766507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-22 20:56:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-23 20:56:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.data-for.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671258586034561986580736248818774665952739153732395410685235644605858438286908780748761504487018446576237972930725414578602693046687558130563759574551717141177773459864368540162551696219879294587281406115073377414109643246487756172128901379429130214690540731988631772909323524298281555302229627988900799100107725657836599200991729526215268540099475482982711011797267565301738473500403682264311783183584686307545977937568924187897389855204492708241667575094103047877120949797516968653293674446443144288539274365607652359075667247984205905699675430197949392079629042939471476301528524618609056481779727447100013641148798942925225661048485037867386111226902655959959526264692782518383516939433929240873523710270193433072402565073340787036832872960513454882019187875394182751177535292044009154055686244001480429498777119054901574197322051076107172250683698206139518986089274733147743427855771616567506400643384843122405024566865740371724868197240832803810297966278784888031857445516668471510114827120202665605769314236409993610571921264427901107623996727159662233405447204146640585436614714857260738371007717703443598389533613303169402396220537225681914686067060650841416524214070573588889169825314417036953397762489778918959188857870213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data-for.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-for.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a333a8706277ff242046d42b6657e7da9616c955
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074c258c1a59cf96e41a5a26d7095475eb649a9985e1ea2c20fad0d8f656df83a35f9d71863804d55483dc2fced4bd35763adea9818df1a527fac21dee9ae2ea7abc6a8ab611c98fd803540606a6d91223a3373aa4b0df11e62d3fb92c90e4537c2f77299a96a34d86ec029000fd747783932f9984b692755ee62e6c899a00a799a8f3ae4142c1f09f68b36d07562cd6875236f6e3a55ae55b53c58d6fe6f8dcb366d418ff348f11e66911ca30d90f38ab0c6e7ace5059ed98c027f1f2353fab91f8302681fe837add14aae93b5b4bc2d750f635bcca8815ea17434eb3709af419f3b5a08e8b1a9c6d38e9c09ceb2b041255f45399b553352e1199971b7720a57