thecube.sodic.com

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 74:76:ed:22:7b:d0:d9:25:bc:ad:15:aa was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thecube.sodic.com,OU=Domain Control Validated,C=GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 74:76:ed:22:7b:d0:d9:25:bc:ad:15:aa
Serial Number (int): 36044034222958162444653761962
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 08:7e:c0:e7:da:fb:59:42:9a:ca:b8:e3:cb:ca:d2:f8:79:b8:f6:64
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 36:77:ae:c2:f3:e0:7b:ec:a2:75:6b:04:92:13:34:d7:79:6f:65:b5
Fingerprint (sha256): 39:dc:f4:4a:7f:73:5b:8d:27:5a:73:2a:84:97:96:b1:95:18:25:2d:e0:87:84:fc:78:45:a0:91:16:1d:39:b2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate thecube.sodic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thecube.sodic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thecube.sodic.com

Other certificates including the domain name sodic.com

(limited to 100 certificates)
servicedesk.oiplans.com
thecube.sodic.com
mail.sodic.com
mail.sodic.com
sodic.com
sodic.com
construction-viewer.sodic.com
thecube.sodic.com
construction-viewer.sodic.com
sodic.com
login.sodic.com
community.sodic.com
construction-viewer.sodic.com
eprocurement.sodic.com
sodic.com
gosmartapi.sodic.com
mail.sodic.com
construction-viewer.sodic.com
eoi.sodic.com
community.sodic.com
login.sodic.com
thecube.sodic.com
sip.sodic.com
sodic.com
sodic.com
ir.sodic.com
login.sodic.com
construction-viewer.sodic.com
eprocurement.sodic.com
eprocurement.sodic.com
sodic.com
itservicedesk.sodic.com
strategy.sodic.com
community.sodic.com
construction-viewer.sodic.com
community.sodic.com
eprocurement.sodic.com
sodic.com
integration.sodic.com
sodic.com
construction-viewer.sodic.com
servicedesk.oiplans.com
construction-viewer.sodic.com
servicedesk.oiplans.com
mail.sodic.com
construction-viewer.sodic.com
sodicwebsite.kijamii-dev.com
sodic.com
servicedesk.oiplans.com
sodic.com
sodic.com
login.sodic.com
thecube.sodic.com
sodic.com
sodic.com
imagine.sodic.com
sodic.com
login.sodic.com
eprocurement-prep.sodic.com
community.sodic.com
community.sodic.com
construction-viewer.sodic.com
sodic.com
construction-viewer.sodic.com
login.sodic.com
construction-viewer.sodic.com
sodic.com
plex.signalwarrior.net
community.sodic.com
login.sodic.com
eprocurement-prep.sodic.com
thecube.sodic.com
eoiadmin.sodic.com
sodic.com
itservicedesk.sodic.com
eprocurement.sodic.com
construction-viewer.sodic.com
sodic.com
mail.sodic.com
itservicedesk.sodic.com
strategy.sodic.com
eprocurement.sodic.com
sodic.com
sodic.com
eprocurement.sodic.com
mail.sodic.com
login.sodic.com
gosmartapi.sodic.com
community.sodic.com
eoiadmin.sodic.com
construction-viewer.sodic.com
community.sodic.com
itservicedesk.sodic.com
eprocurement.sodic.com

Certificate

The complete raw certificate details for thecube.sodic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21tE6sJsOdMU1DXEfs12
h8tKvvosFPKGrvt8W4Qiu0Q1k1VPhMZ882muYnW8hoHFnlsy9WHwLGKuAm5VK6Q7
eoBJGnQohpo4Oshk5Jlv+J49EV760lFB5jdSkkQMkQzVQWXG19BUKT4U5s+7I/ig
PZffqWxBYbVoslWdOmB/qY2fe5uEjYgWL3La1he0O2mjj80iw6O77shrd51o+6yf
DryJyCa3LHJBo1JwGhdQIdNY5UkhfuWOE2g1eReo7g2qOzU2DuZMOFAl/iL8FonI
QSpBwUL9lrv2WXJ+7zV98iadzpvvAb+n7tckfPuCPtc8qVUbUn5M+yeMAom5DaN0
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36044034222958162444653761962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 07:24:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 07:24:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'thecube.sodic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27691195311026207657540859952146577249289343745572589238460293966801429697913865245137561536464980544102628403172175147516901993033858845101360877336284827468755072869727827106274652899054462279790483261995573917568047764367094523539644586072283910221541565391287953015129122952299720417397225236320940294424229399335378062377358604976191610224583400132143766661487576744062384363134745516879975313605325390830425380438823366405691565390545858404014876280376577181654832485363189009784305955954931827777573282921598731602696594917454545392208626329956769786881178794128436527495303160824006730116394608033056950547567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecube.sodic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							087ec0e7dafb59429acab8e3cbcad2f879b8f664
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167c033fddf00000403004730450220448a56ccec42e41dc0408fac21179ac59b79f502e12dd6eb551ec4b5f79b6bea022100d427846568fd0704fad84cbaca66942af7229b0ff73d8f5955a177db27f26404007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167c033fd980000040300473045022076b0c5ea9a66bdbb7f072f899777772219b03a108e2e6c0a4f3fe9f81c305329022100fb87b5dbe01005f5fb9856bca7727efd4bedee5419c95fe7dd73710adab1c874
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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