mail.lkwd.net

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:ac:4d:79:98:49:d4:d7:25:bd:3f:e8:25:62:ba:51:0f was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.lkwd.net,OU=Domain Control Validated,C=GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:ac:4d:79:98:49:d4:d7:25:bd:3f:e8:25:62:ba:51:0f
Serial Number (int): 1492367208436685367456780482575272152551695
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 86:eb:d6:1f:7b:0c:17:80:59:f9:6f:3b:17:48:a9:e1:b9:3e:be:94
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 75:3a:d3:4f:c5:40:af:02:96:c4:36:a1:8f:83:68:db:2b:93:e9:c9
Fingerprint (sha256): 54:ad:41:de:81:06:30:6d:28:09:4e:37:3a:48:3b:4f:f5:36:fd:a4:1c:1b:77:44:4a:f9:9e:88:03:d2:b2:a1

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate mail.lkwd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.lkwd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.lkwd.net

Other certificates including the domain name lkwd.net

(limited to 100 certificates)
helpdesk.lkwd.net
helpdesk.lkwd.net
servicedesk.usml.edu
servicedesk.azinformatica.com.br
mail.lkwd.net
dev.avkn.co
helpdesk.lkwd.net
avkn.co
*.avakin.life
helpdesk.teamsoftware.com
helpdesk.lkwd.net
avakin.com
helpdesk.lkwd.net
helpdesk.bchg.dk
helpdesk.wsfssh.org
avakin.com
helpdesk.luminexhdf.com
avakin.com
servicedesk.envigo.com
helpdesk.lkwd.net
helpdesk.wsfssh.org
avkn.co
helpdesk.teamsoftware.com
mail.lkwd.net
servicedesk.usml.edu
helpdesk.lkwd.net
helpdesk.lkwd.net
helpdesk.lkwd.net
helpdesk.lkwd.net
helpdesk.luminexhdf.com
mail.lkwd.net
mail.lkwd.net
*.avakin.life
mail.lkwd.net
helpdesk.lkwd.net
helpdesk.lkwd.net
servicedesk.envigo.com
avakin.com
helpdesk.nai-group.com
helpdesk.teamsoftware.com
avakin.com
mail.lkwd.net
helpdesk.bchg.dk
helpdesk.bchg.dk
servicedesk.envigo.com
*.avakin.life
helpdesk.luminexhdf.com
servicedesk.azinformatica.com.br
servicedesk.usml.edu
servicedesk.envigo.com
helpdesk.lkwd.net
*.avakin.life
avkn.co
helpdesk.cgme.net
servicedesk.envigo.com
helpdesk.lkwd.net
avakin.com
*.lkwd.net
helpdesk.lkwd.net
helpdesk.lkwd.net
servicedesk.envigo.com
helpdesk.lkwd.net
dev.lkwd.net
helpdesk.teamsoftware.com
helpdesk.cgme.net
avkn.co
helpdesk.lkwd.net
helpdesk.lkwd.net
servicedesk.envigo.com
avakin.com
helpdesk.wsfssh.org
servicedesk.envigo.com
dev.lkwd.net
*.avakin.life
servicedesk.envigo.com
helpdesk.lkwd.net
helpdesk.wsfssh.org
mail.lkwd.net
helpdesk.lkwd.net
servicedesk.azinformatica.com.br
servicedesk.envigo.com
helpdesk.nai-group.com
helpdesk.lkwd.net
helpdesk.lkwd.net
helpdesk.lkwd.net
helpdesk.lkwd.net
helpdesk.lkwd.net
servicedesk.envigo.com
helpdesk.luminexhdf.com
helpdesk.bchg.dk
helpdesk.cgme.net
helpdesk.nai-group.com
servicedesk.envigo.com
avkn.co
helpdesk.lkwd.net
servicedesk.usml.edu
helpdesk.lkwd.net
servicedesk.azinformatica.com.br
servicedesk.envigo.com
helpdesk.lkwd.net

Certificate

The complete raw certificate details for mail.lkwd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1pHz+l8FiSxIu6wWmhT
u1in2XposVpB9txtu5e1nStN6KCWxCqKiFFxMnl8em97mbCfrC7KKt3E/M3cuLOg
mQvkFU+n1DJZ+QbKMH4RnWxwlS+vhWMAt6h265H2Xjy70L0w8arEuCxAwKc9JsjY
4EZO0IjOFbTnKk9c8t7zlB6yQQFCHHUUKw3CNASosEHfVhkf7vjUtPuwzn7sfk7r
aY3H7XOi4tGQQlSJbmgWF/YliW36Jcont/pAPpjpj/E12k9sxGVt6xsAZ5jMu7QE
tihOPVNEkcdTSCHsRmkm286qZsI1N9ZD8vuRpMuXETR6ejx9TGG7aWcK4YxzZb28
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492367208436685367456780482575272152551695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-12 12:59:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-12 12:59:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.lkwd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25670894889911100218485198607904916724146597947169931941593314712561063325932827643612222624902654379779635174280652867506688330501672109317519962803899860466390571583003007483789715350463507046495376759762932672693688550690328655578670571056882620548487704270203905476403952881181985374705509870710483459219370734616112143093705452447147565579928995624837473476132061564182766412800127537543400975946615183020004075126735850049231441884733296274506131200625839569360557899471275143455974535077677458812635326343360422947981761034103266275240580683024699240076817647620360418642128353035556334673636773248940822608949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lkwd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86ebd61f7b0c178059f96f3b1748a9e1b93ebe94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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