fors.ford.com.tr

- Ford Otomotiv Sanayi A.S. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 51:ea:fe:88:b2:3b:29:ad:aa:c6:cd:3a was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ford Otomotiv Sanayi A.S.

Organization: Ford Otomotiv Sanayi A.S.
Organization unit: Bilgi Teknolojileri
State / Province: Istanbul
Locality: Sancaktepe
Country: TR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 51:ea:fe:88:b2:3b:29:ad:aa:c6:cd:3a
Serial Number (int): 25352376440005521296220147002
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b4:43:b7:4b:d6:74:ef:98:c1:be:8f:8d:d7:59:99:d7:14:81:5a:82
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 57:89:f8:77:b7:e6:19:7a:60:23:46:ba:4d:e4:d3:18:f1:0e:d4:19
Fingerprint (sha256): 3e:97:12:92:fd:11:5b:36:58:0e:37:82:91:b0:f5:d7:c7:a4:be:08:ca:f2:af:55:8e:97:94:e4:5f:3e:a3:5b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate fors.ford.com.tr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fors.ford.com.tr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fors.ford.com.tr

Other certificates including the domain name ford.com.tr

(limited to 100 certificates)
*.scm.cvp.ford.com.tr
secure.fordeumicrosites.com
truckmarket.ford.com.tr
www.ford.gr
www.ford.gr
secure.fordeumicrosites.com
fosn.ford.com.tr
fomail.ford.com.tr
*.ford.com.tr
musterininsesi.ford.com.tr
www.ford.com.tr
secure.fordeumicrosites.com
media.ford.com.tr
fors.ford.com.tr
cargobb.ford.com.tr
*.ford.com.tr
blog.ford.com.tr
akademi.ford.com.tr
www.owner.ford.eu
fosnapp.ford.com.tr
media.ford.com.tr
ford.com.tr
iot.cvp.ford.com.tr
ideal.ford.com.tr
fors.ford.com.tr
fors.ford.com.tr
ford2el.ford.com.tr
portal.ford.com.tr
ford2el.ford.com.tr
blog.ford.com.tr
fors.ford.com.tr
betablog.ford.com.tr
sip.ford.com.tr
sip.ford.com.tr
sslvpn.ford.com.tr
blog.ford.com.tr
gonlumsenle.ford.com.tr
www.owner.ford.eu
*.scm.cvp.ford.com.tr
forsmobile.ford.com.tr
lyncwebext.ford.com.tr
fosnapp-1.ford.com.tr
www.owner.ford.eu
www.owner.ford.eu
ebadmz.ford.com.tr
blog.ford.com.tr
betablog.ford.com.tr
sip.ford.com.tr
www.owner.ford.eu
truckmarket.ford.com.tr
fodnapp.ford.com.tr
ford.com.tr
fosnapp-1.ford.com.tr
ford2el.ford.com.tr
*.scm.cvp.ford.com.tr
secure.fordeumicrosites.com
*.ford.com.tr
secure.fordeumicrosites.com
ford.com.tr
truckmarket.ford.com.tr
fikirhane.ford.com.tr
fodn.ford.com.tr
secure.fordeumicrosites.com
secure.fordeumicrosites.com
foshare.ford.com.tr
ford.com.tr
ford2el.ford.com.tr
ford.com.tr
www.owner.ford.eu
gonlumsenle.ford.com.tr
www.saml.ford.com.tr
secure.fordeumicrosites.com
sip.ford.com.tr
*.scm.cvp.ford.com.tr
blog.ford.com.tr
*.ford.com.tr
imsportal.ford.com.tr
imsportalapp.ford.com.tr
ford.com.tr
smarteam.ford.com.tr
forsmobile.ford.com.tr
*.scm.cvp.ford.com.tr
www.ford.gr
iot.cvp.ford.com.tr
truckmarket.ford.com.tr
*.ford.com.tr
*.ford.com.tr
musterininsesi.ford.com.tr
truckmarket.ford.com.tr
truckmarket.ford.com.tr
ford2el.ford.com.tr
portal.ford.com.tr
www.owner.ford.eu
ford2el.ford.com.tr
rekabetegitim.ford.com.tr
www.owner.ford.eu
truckmarket.ford.com.tr
www.owner.ford.eu
*.ford.com.tr
*.ford.com.tr

Certificate

The complete raw certificate details for fors.ford.com.tr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DgeFg7tS0Va3MleE9k5
X/oQ4WONZXTge/limR74jr872zsNdYOEBLGLgD6hYwSVhHSOY7eTzIxQoWobF39H
eHmTnOpme6BPU0884vvozAggtk4x9/+bDD3wNk5xdMs7lbTrGsShxQksXcM0973W
4spZXriQKN5oVwoT9bLlqZjKHbRfA8Lt5ZQCpka/55B5oGVJqF5hurxUYAAwtkqu
U8YuHxJOTABJkGKUyp22YfpCgZHvFnUdKXxUamKStfglihTgxuFHB+y6kjB9MkhY
k8WEDNTEeRiZYpI/ANiP01Qfz+Qia4zFY/OiO0JuN6xHAtQ22qhA7/O1k0moCkHe
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25352376440005521296220147002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 11:40:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-31 11:40:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Istanbul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sancaktepe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bilgi Teknolojileri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ford Otomotiv Sanayi A.S.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fors.ford.com.tr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27800099675029534398610280866612064278700764312392068782558915404803449504311578283057546086073319213558958663567811923280650296421310644183858745791070344142988736023564676499747953945283412467769881574026493093251637273564610634382676134348258557159885821152626229976357738809299057404973841086662305413370672193462611811333816784158348998939581403884128981440095858115196494876248590248602051445425822218626801750771002406587150143980791025020886380838490665015878269482599945178553189561905055375074055579188909542053611043965676873397532982354432486889226496963835881202791600851621695900856614835437406347451981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fors.ford.com.tr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b443b74bd674ef98c1be8f8dd75999d714815a82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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