theclub.com.hk

- PCCW-HKT DataCom Services Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 08:fb:94:d2:64:c1:49:3b:8a:05:10:db was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PCCW-HKT DataCom Services Limited

Organization: PCCW-HKT DataCom Services Limited
State / Province: Hong Kong Island
Locality: Eastern District
Country: HK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 08:fb:94:d2:64:c1:49:3b:8a:05:10:db
Serial Number (int): 2780023250609917253512401115
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: bf:48:8b:3c:f3:80:40:4c:31:68:11:0d:70:36:44:ea:7f:16:14:6d
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): d0:5a:5b:26:ca:21:51:b7:32:e7:ed:e4:fc:ab:48:0a:cb:a6:69:50
Fingerprint (sha256): 3f:80:46:c8:de:49:8f:2a:b9:3f:b7:66:e7:d3:a9:55:6a:d3:69:54:e4:6a:6a:41:8d:41:7a:3d:3d:01:8a:61

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate theclub.com.hk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theclub.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

theclub.com.hk
www-d0.theclub.com.hk
www-t0.theclub.com.hk

Other certificates including the domain name theclub.com.hk

(limited to 100 certificates)
nps.theclub.com.hk
webfmh.ehryourway.com
repair.me
rewards1d.theclub.emarsyshk.com
uat.theclub.com.hk
cransa.serflexcorp.com
rewards1d.theclub.com.hk
*.shop.theclub.com.hk
uat.nps.theclub.com.hk
*.theclub.com.hk
redeem.theclub.com.hk
www.startbywgsn.com
rewards1d.theclub.com.hk
*.aem.shop.theclub.com.hk
order.theclub.com.hk
redeem.theclub.com.hk
aunjaicare.com
www.theclub.com.hk
theclub.com.hk
gamequi.cc
theclub.com.hk
uatredeem2.theclub.com.hk
rewards1d.theclub.com.hk
vwn0bx.info
redeem.theclub.com.hk
rewards1d.theclub.com.hk
www.empcleaning.com
www.unitedlogistics.app
www.survey.theclub.com.hk
18th.pl
uatredeem.theclub.com.hk
www.theclub.com.hk
18th.pl
rewards1d.theclub.com.hk
clubcare.theclub.com.hk
nps.theclub.com.hk
clubcare.theclub.com.hk
uatredeem.theclub.com.hk
rewards1d.theclub.emarsyshk.com
app.stockoapp.com
rewards1d.theclub.com.hk
uat.theclub.com.hk
uatredeem.theclub.com.hk
uat.theclub.com.hk
*.theclub.com.hk
murph.turnosweb.app
uatredeem2.theclub.com.hk
shop.theclub.com.hk
rewards1d.theclub.emarsyshk.com
rewards1d.theclub.com.hk
www.survey.theclub.com.hk
*.loyalty.theclub.com.hk
rewards1d.theclub.com.hk
uatredeem2.theclub.com.hk
redeem.theclub.com.hk
clubcare-uat.theclub.com.hk
www.aubergecezallier.com
aunjaicare.com
www.hgmultimarcas.com.br
nps.shop.theclub.com.hk
rewards1d.theclub.com.hk
vwn0bx.info
www.survey.theclub.com.hk
hinty.jp
www.theclub.com.hk
uatredeem2.theclub.com.hk
tvmovie.isnottv.com
nps.theclub.com.hk
redeem.theclub.com.hk
mccadefreeman.com
nps.theclub.com.hk
app.stockoapp.com
rewards1d.theclub.emarsyshk.com
accounts-uat.theclub.com.hk
everyonesnft.theclub.com.hk
redeem.theclub.com.hk
rewards1d.theclub.emarsyshk.com
uat.nps.theclub.com.hk
murph.turnosweb.app
*.theclub.com.hk
solanyn.dev
accounts.theclub.com.hk
*.shop.theclub.com.hk
webfmh.ehryourway.com
www.survey.theclub.com.hk
uat.nps.theclub.com.hk
m.theclub.com.hk
*.shop.theclub.com.hk
uat.order.theclub.com.hk
*.shop.theclub.com.hk
rewards1d.theclub.emarsyshk.com
uatredeem.theclub.com.hk

Certificate

The complete raw certificate details for theclub.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qygf6TA8qpPZ8/eWRf4
Dm2WTpK2ijKCbXlpYYdZI/1Uq/wr8mDuPA8ybVxoCyC6piXrFm3f6WCjZkW6iFPp
2LdSvFH/QTE4n9sq/LJP1G4cL2HkC6LAoQYBg24oWI0xenfacaLeSoLuZvd1p5Ue
NKOyyzLyAEtxIMBN/IQRXHQeN6eckN80ptrkF1OmUKtk/04dwAKcvrJ+hOZXgAP6
OZyjeNJAoyokaOcts9Nstab5tV9VMB1AjbasvbEgyjtOPDQArVZfdWPzSl/H0yFK
uIBsrJSwFVGqCQpTlcxEUJkUdK4G80b0ELUrcB1TWzaRZpla2oRtAFL2CIhTkPgc
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2780023250609917253512401115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-17 08:16:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 08:16:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eastern District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PCCW-HKT DataCom Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theclub.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27605076003176492903664209069469381566535068195341706865676734860253099166993729813009772797588348469329271992583453806545631545862250803728558842005635757641041819940796679107351368423428744385002586207768928724519093575198634550749805253352549857006691424771763972066848424855229353931235425348481707809965259296443684434000023802471658146783202556272924635831143066981331530936969292381979395057980616881114914605134360503081810343530407638669833739189438362768890565526589315169020220308679464385922321700781655312985419791300189607318042122886305968691839575228628931170632280429742127886329667571781340434537523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclub.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-d0.theclub.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-t0.theclub.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf488b3cf380404c3168110d703644ea7f16146d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183e503a202000004030048304602210099bea0f7d7034c1247ee8c7a92dbbe7c0733e9679d34763babb9b5e0cf5aaf81022100821682900ec7ca8191725e1510bed97cbaee1090834c180c55c70ba62d6e58fa0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000183e503a1fe0000040300473045022100f7ff4016482070cf0f646fe38152e1f5fe06c170382dd0ab7e18fa1fcb7433380220045e2f4decd175f8ee71540de1611a2d228d3b075ecb4da4f5416ed8523a9b1c007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000183e503a230000004030046304402207cc200f231812dba7917e4ba1632905427e0fbfa7a44326c444cadde933ee02402203503dfa3f4262c25a8803e815cb5fdc0c6fa22321d1062a346a41e4ed1e51113
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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