www.degeleflamingo.com

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 44:6e:8e:d5:98:c7:39:cd:ad:a1:b6:67 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.degeleflamingo.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 44:6e:8e:d5:98:c7:39:cd:ad:a1:b6:67
Serial Number (int): 21178637024214960441932232295
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: fa:e6:57:9f:38:98:81:70:e3:af:c6:8e:da:b8:11:87:60:bf:13:4f
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): e4:77:57:2f:57:b4:bb:2b:d5:ea:16:e9:af:95:53:94:15:24:cc:05
Fingerprint (sha256): 60:0f:30:7a:63:41:cb:0f:f9:4a:94:57:09:00:d9:8d:0d:74:ec:15:c5:01:ac:5b:aa:98:67:89:de:e3:27:dd

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate www.degeleflamingo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.degeleflamingo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.degeleflamingo.com

Other certificates including the domain name degeleflamingo.com

(limited to 100 certificates)
degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
stage.app.degeleflamingo.com
app.degeleflamingo.com
app.degeleflamingo.com
stage.app.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
email.degeleflamingo.com
www.degeleflamingo.com
app.degeleflamingo.com
www.degeleflamingo.com
stage.app.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
stage.app.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
pizsib.degeleflamingo.com
degeleflamingo.com
stage.app.degeleflamingo.com
degeleflamingo.com
app.degeleflamingo.com
stage.app.degeleflamingo.com
pizsib.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
stage.app.degeleflamingo.com
app.degeleflamingo.com
email.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
app.degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
stage.app.degeleflamingo.com
degeleflamingo.com
stage.app.degeleflamingo.com
www.degeleflamingo.com
stage.app.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
app.degeleflamingo.com
app.degeleflamingo.com
www.degeleflamingo.com
app.degeleflamingo.com
www.degeleflamingo.com
app.degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
app.degeleflamingo.com
app.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
email.degeleflamingo.com
stage.app.degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
www.degeleflamingo.com
app.degeleflamingo.com
app.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
degeleflamingo.com
stage.app.degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com
degeleflamingo.com
www.degeleflamingo.com

Certificate

The complete raw certificate details for www.degeleflamingo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygHgdeACueM0ep381VV0
F7dzvie0yxlc2BdVU8H+//ZDC0r+x9bPpgx/Q+g6O9N5ygg+/+VFRqWqhlw7Fx/Q
FlxKruN5kRDfgVcp/sW7LAJh0qxDYU1o+grmZAgT9djfvwt46fS89gKk6F2tW9ZF
JQJr2kZZyw+AZRSJycoygbwXsep6D7tytd56/6JnFIvHxviYjI3n9lmNQCAz1FBa
oJ5EowtCNsmPjg74tSUIkaT0b6XITX9qN37iqfS1Tfv+Fnvreb9BvDi3WSpPkC/S
BMRNj6FhcStLvkTXFKgp84pOek7AKrhtTpBavz5Oq7xNynzITMOFarQZmI3H9PsD
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21178637024214960441932232295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 04:50:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 04:50:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.degeleflamingo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25501063087041746948713979384787339331828842986927531059633278638104913871774618705020326347954291036225035669452901067927653870873008627659016802624546005047619079425176819559405993516329294011745911061664360104638084698601129169642990900477149689696851836109923409922669963684555317037996150512237921937002752276604383594332109495316503217203331541084632820025937350229580919944353322507642295458520033645746357299323627431666014348348808145481403803322443461471086615815034029066768158512156073901263337659360242472630737784921055890211136110390050227609390094233331744212646499659094051539575575458525409588216577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.degeleflamingo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fae6579f38988170e3afc68edab8118760bf134f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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