*.rosen-group.com

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 5e:01:60:f9:30:22:f3:2a:b1:ef:06:3d was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.rosen-group.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 5e:01:60:f9:30:22:f3:2a:b1:ef:06:3d
Serial Number (int): 29093257792916282956651103805
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a2:3e:d7:5c:8a:61:5f:50:25:8a:7b:1b:e9:94:5d:b3:f7:5d:2f:a8
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 3b:9d:49:67:6f:54:07:cd:ab:4c:88:54:48:b7:b1:18:2e:19:e2:e8
Fingerprint (sha256): 45:7a:33:37:7f:66:71:f7:3d:b8:f7:7c:fb:87:71:29:62:46:68:d1:3b:59:f0:60:97:7e:16:97:9b:9b:bd:dc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate *.rosen-group.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rosen-group.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rosen-group.com
rosen-group.com

Other certificates including the domain name rosen-group.com

(limited to 100 certificates)
bhsa.mysportsanalysis.com
farmviability.oahurcd.org
rosen-group.com
irishpolofoundation.polo-development.com
www.educate.ekgguy.com
shop.rosen-group.com
educate.ekgguy.com
*.rosen-group.com
learning.servicon.com
www.learn-experiencemanitouregion.ca
vicpolo.polo-development.com
ww2.rosen-group.com
queenslandpolo.polo-development.com
competence.rosen-group.com
irishpolofoundation.polo-development.com
polopark.polo-development.com
learning.servicon.com
plataforma.pedago.cl
uni.bradfordconsolidation.com
learning.servicon.com
learning.servicon.com
farmviability.oahurcd.org
farmviability.oahurcd.org
learning.servicon.com
rosen-group.com
farmviability.oahurcd.org
learning.servicon.com
careers.rosen-group.com
www.tridotacademy.com
wapolo.polo-development.com
*.rosen-group.com
book.dragonnapper.com
wapolo.polo-development.com
competence.rosen-group.com
uni.airportlogistics.org
book.dragonnapper.com
queenslandpolo.polo-development.com
rosen-group.com
educate.ekgguy.com
farmviability.oahurcd.org
irishpolofoundation.polo-development.com
ww2.rosen-group.com
sapa.polo-development.com
www.educate.ekgguy.com
www.learn-experiencemanitouregion.ca
irishpolofoundation.polo-development.com
ww2.rosen-group.com
educate.ekgguy.com
www.educate.ekgguy.com
learning.servicon.com
rosen-group.com
ww2.rosen-group.com
*.rosen-group.com
ww2.rosen-group.com
adfs2.online-dev.rosen-group.com
irishpolofoundation.polo-development.com
educate.ekgguy.com
farmviability.oahurcd.org
university.tektonresearch.com
irishpolofoundation.polo-development.com
wrightway.polo-development.com
educate.ekgguy.com
learning.servicon.com
educate.ekgguy.com
*.rosen-group.com
ww2.rosen-group.com
farmviability.oahurcd.org
courses.rosen-group.com
educate.ekgguy.com
rosen-group.com
hpaumpire.mysportsanalysis.com
www.rosen-group.com
edu.4redi.net
www.tridotacademy.com
queenslandpolo.polo-development.com
ww2.rosen-group.com
rosen-group.com
*.rfklive.com
farmviability.oahurcd.org
sip.roseninspection.net
dev-shop.rosen-group.com
sip.roseninspection.net
www.educate.ekgguy.com
competence.rosen-group.com
courses.rosen-group.com
competence.rosen-group.com
educate.ekgguy.com
www.robertsgordonacademy.com
rosen-group.com
ww2.rosen-group.com
courses.rosen-group.com
lms.brandonsandbox.com
edu.4redi.net
www.educate.ekgguy.com
farmviability.oahurcd.org
ww2.rosen-group.com
ww2.rosen-group.com
*.rosen-group.com
ww2.rosen-group.com
lms.brandonsandbox.com

Certificate

The complete raw certificate details for *.rosen-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA14mjDAYdcdNk2uvNo9Nd
YX/RCkPrzEFx9sJHqQ0u87nRm+2QhMkNw2K+hz08u6Seq6gO1jBRaVAE4+jxhL7M
XvSOcEYdyWVFmWKHJBRG2S87zfksu/l8KkAWDrg0aTHkGslMvRrdJa737kSE/mOz
I7i6h5C5r/FENnSViXNh6zvsGGv2ExtORrPKI2E8ARSRxyaDvRJZjD09RgGrOr8U
vZSi66qAaO0oN53ziut7Bm8HZZ7FTMAxNIRsTlK6IMgIvzPJINoMSIAa+VxF9aGs
gk8pBqZkL40Wex7+XSbg6l3DgU2QZeY8bAAcFP2k2izhAf569kFr3+/nUyGHEvK8
8ovFBq+x8QrczEKucVQHOwfgJwOagRlFpYPoMYvNQ+H1e/yfNZgz0eDuDwQpUqsW
Q5UjFgfCDz4IKHs5VNa2et4ORKHbG35ij9gHeff5xMGZFL5dJUQAw2uhKOHNKfOo
hVQoZmTfHu9sNbAuHVafkwzUwA6F5gEZqS2h8TsptpwbxEJm1yhOarEMEYJxPzGo
UpVo7AIunPN7Ic9gLupvg4gRebO3Pw1WdSiVz/54CS/TJDlN3wRA4v3PIFdSvrXE
0S+7vdRJl8otOpHVVs5wUTaSOgdevCQ2lxd5RV3isUcQpOcNR6N81kMnrrOp087q
DXhlzPST/fXpi8TZUfkpr5ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29093257792916282956651103805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 08:05:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 08:05:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rosen-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879316871388711262911066401006981103240139212448457019537613891479870535849241275820374438516801223553811206898249555499790681025039728882415607287206000908160939194875430355924377430887649774124029354320673188720807537896554908031588655977178943060952792027903854653779538068030704621847323641084462571044162181977077821207592634050785851048435839389544656414055532760539643179972254834099105484340833776368482881660411195339905963651558319821757850891638900521946155171807043444939309817685577815820434749871577560076019653508495504111185363619142220550424043634591709972475880300037335784515148469747086391370075049992448907127420912999803457345896757191564765885529983279441338641330945410163552392907389946375725843855302596311306639428929083389565259608155699028143048027204872190295469181070183660892279256418078672324907639557215331117790888643870110895164544600316946943931953053804187383331137448555696536198554116309114710514602888996181982297960295667034449699597832019864065693446829903193773533695627098151154525778526695493766705659801732750713892649915319306527889856640642943961032243290315005876214031468688932017447654083485830575241560866562466024979180315867541269431675217479480529005463861737485957108482027409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosen-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosen-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a23ed75c8a615f50258a7b1be9945db3f75d2fa8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0071c2ccce29e5874f048fcebc6b61c6be3bac9c57bbd6d6f7bbb03839d994c95a785fbd4931ff9c2c25acffd74d6f5a6cd49776b07269d0e7d5790fe17b7b300469a00a05e2cfe67a1ff408c6eaea95bab34e92e126cb94d5735a267e9b298c5bb8fe4d7b65ffc1b0e0e6b6d896c64909b0d8ff80adbddb10efaef4de72a6906ab19239d69ddefb1565c563f3716a0db888a76bb8a430945a9a07d5af8b7e376fc8d612e7c53ee89fe1c6d1d2352e1cc220e76e78106091bd62fa4c3dfd3c8b13b8f5af001847ffe095847acccfa00356db671f31f30f1f668aca1b58aae3377f6b715328502288801cc0f1d9e057bdcef86b12354cc506141857b693e499f7fe