sts.coram.nl

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 2a:a7:9e:cc:c5:28:c0:70:8f:73:c6:8e was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sts.coram.nl,OU=Domain Control Validated,C=NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:a7:9e:cc:c5:28:c0:70:8f:73:c6:8e
Serial Number (int): 13201010935619037013524858510
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 95:46:16:9a:cb:e4:a7:df:9b:4d:d6:46:2b:ae:d7:a0:92:3c:6b:a4
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 50:71:07:21:18:d8:36:31:d6:6c:68:dc:26:df:c5:33:39:55:37:81
Fingerprint (sha256): 5a:ad:d6:56:a2:65:d3:1d:90:51:5f:ba:e5:38:fb:e3:1b:9e:5e:2f:f8:b3:6c:43:60:42:5f:b1:9c:64:68:9f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate sts.coram.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.coram.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.coram.nl

Other certificates including the domain name coram.nl

(limited to 100 certificates)
monitoring.coram.nl
www.coram.nl
coram.nl
dpi-gld-ads010.ad.coram.nl
coram.nl
coram.nl
coram.nl
ucaccess01.coram.nl
ucaccess01.coram.nl
coram.nl
fepool01.coram.nl
portal.coram.nl
sts.coram.nl
www.coram.nl
coram.nl
accessportal.coram.nl
sts.coram.nl
coram.nl
accessvpn.coram.nl
coram.nl
vpn.coram.nl
fepool01.coram.nl
coram.nl
coram.nl
coram.nl
portal.coram.nl
meetingpoint20.coram.nl
coram.nl
coram.nl
coram.nl
sts.coram.nl
portal.coram.nl
coram.nl
accessportal.coram.nl
sts.coram.nl
coram.nl
ucweb01-ext.coram.nl
coram.nl
ucweb01-ext.coram.nl
sts.coram.nl
sts.coram.nl

Certificate

The complete raw certificate details for sts.coram.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13201010935619037013524858510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-01 14:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 14:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts.coram.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685837621077324320141242351331682557665052715696464276616580540230870310814924517828849844323293555389364002598133991273547516338121869309977584269082883590246755854864873082823539840782503178883002775295221059440068888504996699766399717264032131055407123638272586617007420022154602448157247616807820125709990260764556542805720199559415222966846967153439335606747356998701184647389864839998786212746479006370458361061545014853660279845106292908896461529013661332823387403353477153197186183195871687176785935644192390760489592337510310407087038095770135790817694221661408721148633235733357906814225431083365509508415104558344529228246859355055572968009754182266813278310589424860573932137890488836178330216465851582155598417191688573464050312976556302871763891572258041005635357882748187980329672590702274673514529592231436531903617407516115401957637568937568485673081095034729874686286252407257718090113962469487907746697796476418211768690906997654434344029920733989787349403289093909256338982414682129206977731611116264404744960868530699955815921564076278714465020442570171888564746215702148424378396744915520068170233638176187692816562824405933870987601873445187767664370777396452449455439182462498969927478618018577531488595518037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.coram.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9546169acbe4a7df9b4dd6462baed7a0923c6ba4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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