vpn.rsyd.dk

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 65:5a:87:ec:96:47:0a:44:73:3f:87:91 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn.rsyd.dk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 65:5a:87:ec:96:47:0a:44:73:3f:87:91
Serial Number (int): 31367431199456592482627717009
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1f:16:99:66:24:7f:5f:87:ed:b0:70:10:1d:f6:e5:77:7c:60:16:de
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 0a:88:09:87:b3:ed:bf:a4:e8:95:a8:60:e2:fd:5f:20:9c:b7:e4:67
Fingerprint (sha256): 41:12:f0:6e:e8:71:a9:1d:95:6c:6d:52:17:09:91:f6:c9:38:a7:ab:eb:f5:68:12:1f:f5:8f:c7:47:05:38:5a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate vpn.rsyd.dk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.rsyd.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.rsyd.dk
vpn01.rsyd.dk
vpn02.rsyd.dk

Other certificates including the domain name rsyd.dk

(limited to 100 certificates)
meeting.rsyd.dk
mammo.rsyd.dk
fs.rsyd.dk
vpn.rsyd.dk
vpn.rsyd.dk
expe02.video.rsyd.dk
orbit.rsyd.dk
srvodevidexpe02.rsyd.dk
open.rsyd.dk
*.rsyd.dk
fs-udd.rsyd.dk
Hybridmailflow.rsyd.dk
mammo.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
EXPE.video.rsyd.dk
JGEXPE.video.rsyd.dk
expe02.video.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
*.rsyd.dk
intra.reg.rsyd.dk
intra.reg.rsyd.dk
vpn.rsyd.dk
praksis.rsyd.dk
ddl.rsyd.dk
EXPE.video.rsyd.dk
fs-udd.rsyd.dk
stssig.rsyd.dk
*.rsyd.dk
vsp.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
meeting.rsyd.dk
*.rsyd.dk
eboksrest.rsyd.dk
*.booking.rsyd.dk
booking.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
EXPE.video.rsyd.dk
intra.reg.rsyd.dk
*.rsyd.dk
vsp.regionsyddanmark.dk
Stsenc.rsyd.dk
vpn.rsyd.dk
intra.reg.rsyd.dk
*.rsyd.dk
srvodevidexpe01.rsyd.dk
*.rsyd.dk
srvodeExpE01.rsyd.dk
webmail.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
vpn.rsyd.dk
meeting.rsyd.dk
*.rsyd.dk
sip.praksis.rsyd.dk
*.rsyd.dk
expe02.video.rsyd.dk
*.rsyd.dk
EXPE.video.rsyd.dk
sms-video.rsyd.dk
ddlsecurity.rsyd.dk
srvodeExpE01.rsyd.dk
meet.rsyd.dk
sip.praksis.rsyd.dk
mammo.rsyd.dk
expe02.video.rsyd.dk
*.rsyd.dk
jgexpe02.video.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
test.udkaldssystem.rsyd.dk
fs-tst.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
s201dc-ExpE02.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
mammo.rsyd.dk
*.rsyd.dk
dankost.patientbestilling.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
*.rsyd.dk
*.rsyd.dk
open.rsyd.dk
vpn.rsyd.dk
s201dc-ExpE02.rsyd.dk
JGEXPE.video.rsyd.dk
jgexpe02.video.rsyd.dk
meeting.rsyd.dk
mammo.rsyd.dk
vsp.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
*.booking.rsyd.dk
test.udkaldssystem.rsyd.dk
dankost.patientbestilling.rsyd.dk
vpn.rsyd.dk
srvodeExpE01.rsyd.dk
*.rsyd.dk
*.rsyd.dk

Certificate

The complete raw certificate details for vpn.rsyd.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7NdX9kXB4TeVuBIb3Il
gV5WneZ15bl1URkhh+Hogrb7PYbVV4uRSHKwCf2t8yqEj8+updgN1HBt8o4VGONg
i+r6hDsTpkEnIHdblx2QKt9OQrL7lOdmAKdS68OvuXGTyWNOe29T/h+qCM3nFPWP
mxUGjjObzA57i2rumcAq9nxaqBpgNTA0ih9X8o0H5SdnSVUL299XyEJ3j8wyNMPO
2IghVQZd8LDYoNUWzRAWl3xkJfc+utfqzHszdVilvfI5OOiYfN4JR4sjO92lMx8z
etSIyR9j991QHjlhNvkr/6pqrGTcLDB7VaspB/VlP3HWxS0wr1oscmDWnXbsmglw
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31367431199456592482627717009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 14:10:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 14:10:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.rsyd.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18140525661805633701072369247881904037397251573507264144086506884880478830023783824147804984579702580032134463760153504891194338462301036777934230049676975549391714929408612952436672541225372886579055595773807073340443256654322405759958832172642108899594978145811005893321245609716849111780222820967293578907151307302932863036479857086962734375541922116191633037496112931907461788069030117308737422733749565343969843224729168500138865378675025672694110334589796460960462514190511214980020203931151629285253663871008916867604169830760787537549411063725367144274378938729636069357517459048520705192960691729188914819209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.rsyd.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn01.rsyd.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn02.rsyd.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f169966247f5f87edb070101df6e5777c6016de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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