activate.barco.com

- Barco N.V. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 53:cc:8c:27:be:64:23:7d:24:63:b4:80 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barco N.V.

Organization: Barco N.V.
State / Province: WEST-VLAANDEREN
Locality: KORTRIJK
Country: BE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 53:cc:8c:27:be:64:23:7d:24:63:b4:80
Serial Number (int): 25934538546822775066065089664
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 10:ac:9f:53:30:e6:f2:39:9d:81:1e:25:c2:46:a5:16:d1:81:d2:40
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 79:8d:af:24:4d:b4:87:ab:46:c3:07:cd:bd:51:a4:07:e6:aa:75:1f
Fingerprint (sha256): 4d:d2:bf:c1:34:0a:85:3b:e5:ca:93:51:3d:c4:84:23:5c:ff:36:b4:25:e4:b1:c1:d5:0b:66:0b:dc:0d:24:8b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate activate.barco.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for activate.barco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activate.barco.com
www.activate.barco.com

Other certificates including the domain name barco.com

(limited to 100 certificates)
outlet.barco.com
*.uat.eu-west-2.synergi.barco.com
edu.barco.com
*.healthcare.barco.com
ir.barco.com
ar.barco.com
*.preprod-10x.ads.healthcare.barco.com
*.healthcare.barco.com
*.qa.ads.healthcare.barco.com
sni.cloudflaressl.com
smartuptv.com
barco.support.com
edu.barco.com
*.cloud.barco.com
*.devitp.ads.healthcare.barco.com
test-serviceportal.barco.com
link.socialsharing.kbccorporatebanking.be
access01.barco.com
maintenance.cloud.barco.com
*.cloud.barco.com
*.sandbox.synergi.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
cl.sw-t.ch
barco.support.com
*.barco.com
www.register.barco.com
*.dev.synergi.barco.com
*.healthcare.barco.com
*.barco.com
modmed-mock-fhir.devops.ads.healthcare.barco.com
*.store.barco.com
us.cc.barco.com
store.barco.com
edu.barco.com
store.barco.com
go.barco.com
*.healthcare.barco.com
demetra.barco.com
*.barco.com
barcozone-compliancetest.be
*.eu-west-2.synergi.barco.com
auth.barco.com
*.healthcare.barco.com
insights.barco.com
store.barco.com
cc.barco.com
demetra.barco.com
service.medical.barco.com
discover.barco.com
forwrd.it
university.barco.com
qa-web-backend.barco.com
*.uat.synergi.barco.com
ar.barco.com
cl.sw-t.ch
web-backend.barco.com
*.healthcare.barco.com
insights.barco.com
*.prod.ads.healthcare.barco.com
www.trynow.barco.com
*.synergi.barco.com
*.healthcare.barco.com
ram.barco.com
*.preprod-10x.ads.healthcare.barco.com
infopages.barco.com
secure.barco.com
edu.barco.com
*.cloud.barco.com
jobs.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
cl.sw-t.ch
www.register.barco.com
*.barco.com
*.barco.com
infopages.barco.com
*.healthcare.barco.com
store.barco.com
*.healthcare.barco.com
sni.cloudflaressl.com
cc.barco.com
*.healthcare.barco.com
us.cc.barco.com
event.barco.com
*.healthcare.barco.com
activate.barco.com
*.prd.eu-west-2.synergi.barco.com
*.store.barco.com
ir.barco.com
*.preprod.ads.healthcare.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
us.cc.barco.com
*.prod-14.ads.healthcare.barco.com
ar.barco.com
*.barco.com
edu.barco.com
*.dev10x.ads.healthcare.barco.com

Certificate

The complete raw certificate details for activate.barco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA7dI8GeOwaRkH4HUz4Z
aZunw3fUOC70/jqwnS1aEx81L+yJh0vz2lyUfhO7OsSHeme/maK5pWZZ6xyHmoZP
1QeVZkTJZYG2z4c0sQ13qkDioUbAV15zDus3zLQRufQsZnvWxag/Bf3hHs3W5bbr
OXrIhnuhmOKfB0l6cUIM5bwMp8Gq7OxolsSBfrfB4IQuFrGfsy7CrNuk4Q/z5Ufq
/l0UbVNUnVhLgDlmjCiD+K91aG6jgOmYKKoExubTfztS905/UnSyqgyGSatYUzjZ
6tBwHPX8cOoJnd26jyQ/qexp2EX5ADLAhrMulGCeqDkrAxuixhpaabBCTrUprMJg
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25934538546822775066065089664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 14:36:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 13:31:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WEST-VLAANDEREN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KORTRIJK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barco N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activate.barco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23740130959816755457401153817366293816434985757346447274537243442518536011242771629737353108880038504160209048655096838910530530110406350745342269244551869250906454820996322230338844923293471472808363023967172276153205823492977556720196096256771386355695522645343348589138081600163478688550448189648902357859927849621406129729826988625781629520370832035788488170517704686109947838386133541059480692643645325353506335138696271096485322667871239952127993695004413526798729037909189768805043163644651209858840177563236276849953226214009796372089452116986006865924697816037123465438813046476189393049330747532417182097637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activate.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activate.barco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10ac9f5330e6f2399d811e25c246a516d181d240
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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