wapsd-expressway-edge.wapatosd.org

Issued by GlobalSign RSA DV SSL CA 2018

About this certificate

This digital certificate with serial number 11:ae:85:b5:ba:0f:13:8a:c7:16:bd:33 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wapsd-expressway-edge.wapatosd.org

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:ae:85:b5:ba:0f:13:8a:c7:16:bd:33
Serial Number (int): 5472229686585666751434243379
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: d8:b3:40:ef:f6:2f:3d:69:2f:0a:62:9c:81:4e:72:2d:b3:f9:25:f8
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11

Fingerprint (sha1): ff:57:33:04:50:bf:17:8b:84:95:40:20:56:75:bd:a3:4f:21:0b:41
Fingerprint (sha256): 5c:35:26:a7:c1:45:ef:eb:ea:76:92:65:a0:63:04:f0:ec:e6:87:67:f3:87:85:9e:b3:7f:d0:65:d4:92:da:62

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl

Check the revocation status for certificate wapsd-expressway-edge.wapatosd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wapsd-expressway-edge.wapatosd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wapsd-expressway-edge.wapatosd.org
collab-edge.wapatosd.org

Other certificates including the domain name wapatosd.org

(limited to 100 certificates)
6gc.sangerisd.net
mail.wapatosd.org
mail.wapatosd.org
wapatosd.org
*.wapatosd.org
6gc.sangerisd.net
wapsd-expressway-edge.wapatosd.org
admin.bullskin.casdfalcons.org
admin.wapatosd.org
6gc.sangerisd.net
simcoe.wapatosd.org
www.wapatosd.org
mail.wapatosd.org
admin.olaclaremont.com
wapatosd.org
6gc.sangerisd.net
6gc.sangerisd.net
6gc.sangerisd.net
6gc.sangerisd.net
6gc.sangerisd.net
adams.wapatosd.org
wapsd-expressway-edge.wapatosd.org
wapsd-expressway-core.wapatosd.org
6gc.sangerisd.net
wms.wapatosd.org
adams.wapatosd.org
6gc.sangerisd.net
satus.wapatosd.org
whs.wapatosd.org
6gc.sangerisd.net
mail.wapatosd.org
*.wapatosd.org
wapatosd.org
admin.thomasolaeta.school
6gc.sangerisd.net
pace.wapatosd.org
satus.wapatosd.org
mail.wapatosd.org
wapatosd.org
mail.wapatosd.org
6gc.sangerisd.net
whs.wapatosd.org
wapatosd.org
camas.wapatosd.org
adams.wapatosd.org
wapatosd.org
6gc.sangerisd.net
6gc.sangerisd.net
6gc.sangerisd.net
wapatosd.org
mail.wapatosd.org
6gc.sangerisd.net
ADFS.WapatoSD.org
wapatosd.org
li.centralunified.org

Certificate

The complete raw certificate details for wapsd-expressway-edge.wapatosd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5472229686585666751434243379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 22:02:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 22:02:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wapsd-expressway-edge.wapatosd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 963071575902363523222640064453717729668904536151623239345354561463560870691880779551322641736105146762977271432257034664807795876283630166960234861570523030200698750769942790575632436411651437270214289216031791930519833474587323781379147696375750701323829183045012227774285751562496598609413591795140338992874116256457997266180372204944426725402253384511704594945800821913205513219761876028309813045565561616634917430970826206440354888013672311439369301528395962738271934199456435645970503109533408858074347687308487716575465003786746571079713818132800015376387937375108256679360651146358622313259027544979130509835636307752804296327151160780952210648934292635022859632015983100478889928377515388320531844179865714489943186383726796014419722817320377848616780385961633711143383260057397575609267224396702697030101758213609008474633934172775938461495566762315719329240055086563656009047021231242494500705084921456250862143427685861427702057702805137598104777602195029904316748840286548992231258170930331035605706900709428335098508397108522233876250489480464683778526702498584977541691762785881949840580341378799375286922794638234264122088918579217179923107171854202853982375337771246644716768665747780602763590037598221486954737821841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wapsd-expressway-edge.wapatosd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.wapatosd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8b340eff62f3d692f0a629c814e722db3f925f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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