fs.al-ghurair.com

- Al Ghurair Investment LLC -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7d:b1:7a:94:e7:57:02:b2:2d:d6:33:1e was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Al Ghurair Investment LLC

Organization: Al Ghurair Investment LLC
Organization unit: IT
State / Province: Dubai
Locality: Dubai
Country: AE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:b1:7a:94:e7:57:02:b2:2d:d6:33:1e
Serial Number (int): 38900184973238751470281962270
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 31:d7:bb:0e:36:15:1a:ee:df:42:48:23:77:0b:3b:86:26:89:cc:2c
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 23:a1:34:fc:2f:aa:26:e4:b1:cc:4c:ea:ed:5e:78:cf:76:84:fa:7f
Fingerprint (sha256): 40:f5:cf:32:fc:43:8f:ad:23:2f:99:cb:e0:e5:35:0b:71:e5:ed:97:d0:75:df:9d:fe:4a:d2:f6:c4:e3:15:ea

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate fs.al-ghurair.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fs.al-ghurair.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fs.al-ghurair.com
www.fs.al-ghurair.com

Other certificates including the domain name al-ghurair.com

(limited to 100 certificates)
vpn.al-ghurair.com
agieuq.al-ghurair.com
servicedesk.al-ghurair.com
capture.al-ghurair.com
agiana.al-ghurair.com
mail.al-ghurair.com
glsshelpdesk.glss.net
webconf.al-ghurair.com
www.al-ghurair.com
fs.al-ghurair.com
mail.al-ghurair.com
sip.al-ghurair.com
vc.al-ghurair.com
weblync.al-ghurair.com
m5legal.al-ghurair.com
rabt.al-ghurair.com
webconf.al-ghurair.com
al-ghurair.com
mail.al-ghurair.com
rabt.al-ghurair.com
facilities.realmanage.com
mail.al-ghurair.com
www.al-ghurair.com
sni.cloudflaressl.com
vc.al-ghurair.com
m5.al-ghurair.com
al-ghurair.com
agitsbe.al-ghurair.com
vpn.al-ghurair.com
iserve.al-ghurair.com
share.al-ghurair.com
agipsbe.al-ghurair.com
agieuq.al-ghurair.com
vpn.al-ghurair.com
cms.al-ghurair.com
www.al-ghurair.com
caplustest.al-ghurair.com
sip.al-ghurair.com
fs.al-ghurair.com
rabt.al-ghurair.com
mail.al-ghurair.com
cms.al-ghurair.com
caplus.al-ghurair.com
al-ghurair.com
iserve.al-ghurair.com
al-ghurair.com
al-ghurair.com
al-ghurair.com
vc.al-ghurair.com
al-ghurair.com
agieuq.al-ghurair.com
capturetest.al-ghurair.com
sip.al-ghurair.com
rentproperties.al-ghurair.com

Certificate

The complete raw certificate details for fs.al-ghurair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38900184973238751470281962270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 10:36:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-14 10:36:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dubai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dubai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Al Ghurair Investment LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fs.al-ghurair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745327573261511306125787800224733260773236286597474253688507132291869531037903670968369475969756467531822869366484866228056171983758767887869638641446327400374505671000676354617039773216477609597537663904004081348083314603444855041723701627273566255691526984959678180544813036915043383558948967865878914295500311919911117591666148039194462604210634200917995309045232856998425427952436903431273002826019964368231352559379690941979272334459904791033932825090454704288419174012170246621880712888932265664117445430747879438700130580912048413103371251123398033396613741746425479240193663978410595221754933615738424786973318785827685924340625067588707739095773001652324397865090403288805009012788110673079301563152588487496543531693739558003916847530975087189529341627096573766529905826335587111147706441587506428615112664760195591740972828348945793790886203124346891688028340158251829976427771749355301727520590732840765303519422569587092201838992544357573279001695611223456549288950639080778153540177147485141044263261690351631781665677444300992294480391779336868103196579744716402763941781436148217064953703950941209595100911543266071122160762772830116797434413977626457466402615669661248020850291749405648858407780878073396322667454729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.al-ghurair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fs.al-ghurair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31d7bb0e36151aeedf424823770b3b862689cc2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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