RUH-CUCIMPub-01-ms.itc.sa

- SALAM -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 54:7b:00:68:3a:25:79:31:3b:06:4e:84 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

SALAM

Organization: SALAM
State / Province: Riyadh Province
Locality: Riyadh
Country: SA

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 54:7b:00:68:3a:25:79:31:3b:06:4e:84
Serial Number (int): 26145440623456857107852578436
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 4a:84:6f:79:67:8a:b6:f1:7b:3a:e2:6a:17:28:44:6c:5e:27:b2:e3
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 2e:66:f7:46:bf:29:b7:a3:b5:08:35:c2:b6:ed:71:7a:27:61:4b:5c
Fingerprint (sha256): 45:60:eb:4a:95:61:b2:56:03:71:1f:fe:ee:36:04:69:a2:5b:d5:9e:4d:36:21:29:36:95:31:6e:34:0d:05:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate RUH-CUCIMPub-01-ms.itc.sa

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for RUH-CUCIMPub-01-ms.itc.sa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

RUH-CUCIMPub-01-ms.itc.sa
itc.sa
ruh-cucimpub-01.itc.sa
ruh-cucimsub-01.itc.sa

Other certificates including the domain name itc.sa

(limited to 100 certificates)
*.itc.sa
RUH-CUCMPUB-01.itc.sa
ruh-exprwe-02.itc.sa
*.sso.appservice.central01.azurestack.itc.sa
RUH-CUCMPUB-01.itc.sa
*.itc.sa
*.appservice.central01.azurestack.itc.sa
*.itc.sa
zooomvrm.itc.sa
*.itc.sa
*.vault.central01.azurestack.itc.sa
zooomvrm.itc.sa
*.blob.central01.azurestack.itc.sa
*.itc.sa
RUH-CUCMPUB-01.itc.sa
adminmanagement.central01.azurestack.itc.sa
RUH-EXPRWE.ITC.SA
*.adminvault.central01.azurestack.itc.sa
RUH-EXPRWE-02.itc.sa
zooomvrm.itc.sa
api.appservice.central01.azurestack.itc.sa
*.itc.sa
*.itc.sa
*.itc.sa
*.itc.sa
ruh-exprwe-01.itc.sa
mail.itc.sa
zooomvrm.itc.sa
*.itc.sa
sso.appservice.central01.azurestack.itc.sa
*.itc.sa
*.itc.sa
api.appservice.central01.azurestack.itc.sa
ruh-exprwe.itc.sa
RUH-CUCMPUB-01.itc.sa
RUH-CUCPUB-01-ms.itc.sa
RUH-EXPRWE-02.itc.sa
RUH-EXPRWE.ITC.SA
zooomvrm.itc.sa
zooomvrm.itc.sa
*.appservice.central01.azurestack.itc.sa
itc.sa
*.itc.sa
zooomvrm.itc.sa
zooomvrm.itc.sa
*.itc.sa
*.itc.sa
*.itc.sa
*.itc.sa
*.itc.sa
mail.itc.sa
mail.itc.sa
*.itc.sa
ruh-exprwe-02.itc.sa
zooomvrm.itc.sa
*.itc.sa
*.blob.central01.azurestack.itc.sa
*.itc.sa
*.itc.sa
zooomvrm.itc.sa
RUH-EXPRWE-02.itc.sa
*.adminvault.central01.azurestack.itc.sa
*.itc.sa
ruh-exprwe-01.itc.sa
*.itc.sa
*.itc.sa
ruh-exprwe.itc.sa
portal.central01.azurestack.itc.sa
*.itc.sa
sso.appservice.central01.azurestack.itc.sa
zooomvrm.itc.sa
RUH-CUCPUB-01-ms.itc.sa
zooomvrm.itc.sa
*.dbadapter.central01.azurestack.itc.sa
ftp.appservice.central01.azurestack.itc.sa
*.itc.sa
ruh-cucmpub-01-ms.itc.sa
RUH-CUCIMPub-01-ms.itc.sa
zooomvrm.itc.sa
management.central01.azurestack.itc.sa
*.itc.sa
zooomvrm.itc.sa
*.itc.sa
zooomvrm.itc.sa
*.adminvault.central01.azurestack.itc.sa
*.itc.sa
mydrive.itc.sa
adminmanagement.central01.azurestack.itc.sa
adminportal.central01.azurestack.itc.sa
*.itc.sa
*.itc.sa
*.itc.sa
*.itc.sa
management.central01.azurestack.itc.sa
*.itc.sa
RUH-EXPRWE-01.itc.sa
ruh-exprwe.itc.sa
*.itc.sa
RUH-CUCIMPub-01-ms.itc.sa
*.hosting.central01.azurestack.itc.sa

Certificate

The complete raw certificate details for RUH-CUCIMPub-01-ms.itc.sa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeoXqkYwqG0EkNEUDjKf
9Qs4SGPpUAWPvk8Uow3ppUv7hBY1I6IdbtE1WZCwt5ThbGtsjTjWxgB9G7GWgg/I
Y+zeq+YlZ1lbP0lMN+/Js/1rpwfSbljUKGmQmclqV8/hNowtEcvn3Pb2PQbW+h1W
Z/izJUHLdB5sOiwl97JMYt/RBMMAeLxQrBzAkO3WqZoJW1LkJ6pitvqp9wzma/hN
QA10rBBASeSjYhuFZaIaZxPDyY9pVBRt+TJrZ732WMkkjk37GAYrjejwLkBVBgrh
75lYjSRvFlX/6riB+f5LTCFYjF/zSCZ6mdy2I/rL7egevPMbtg8Aw+B7WVr7ftsr
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26145440623456857107852578436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-27 10:06:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-29 10:06:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Riyadh Province'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Riyadh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALAM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RUH-CUCIMPub-01-ms.itc.sa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21449708824710510013103958198783043707792418171583308670057103384930736391870191462667719006892657483681228512815570664051698176510146782470101149701617132321338195164385381036117866738492084697032894765766587846286024210699521209074902160507425912308848439077050508585953735909217093547603778722450226708855711546153115770472134285977110333106582226255956829122657105102640839765969719174263580292831723778028567849903744496944181495850005632082935136581299746882985933534795866828182500570517051529274675908740671203407051604189358957572462694658792928183793405765047129976394061326649824656419833703000439789398969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RUH-CUCIMPub-01-ms.itc.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itc.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruh-cucimpub-01.itc.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruh-cucimsub-01.itc.sa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a846f79678ab6f17b3ae26a1728446c5e27b2e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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