expressway-edge.mlsd161.org

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 38:02:d1:b2:7b:39:13:25:66:86:0d:15 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=expressway-edge.mlsd161.org

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 38:02:d1:b2:7b:39:13:25:66:86:0d:15
Serial Number (int): 17334568668629067174779424021
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 81:93:eb:d7:b4:31:e2:b8:3f:b8:0b:54:ba:65:04:27:1d:d3:61:28
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 8a:16:2c:e5:94:00:15:a2:3a:cf:34:90:65:9a:f1:58:60:55:e2:3e
Fingerprint (sha256): 60:bf:a7:58:8d:5b:53:ba:d8:44:2e:7b:f4:9e:de:4c:5a:1c:0c:7e:bf:61:a0:6d:c6:59:1d:c3:4e:90:6b:40

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate expressway-edge.mlsd161.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expressway-edge.mlsd161.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expressway-edge.mlsd161.org
expressway-core.mlsd161.org
collab-edge.mlsd161.org

Other certificates including the domain name mlsd161.org

(limited to 100 certificates)
mlhs.mlsd161.org
acrma5.org
mlhs.mlsd161.org
ehkeys.ossdms.org
admin.athlosindiana.org
highland.crenshaw-schools.org
mlsd161.org
ltes.mlsd161.org
admin.athlosindiana.org
admin.bronxbetterlearning.org
vpn.mlsd161.org
2.bronxbetterlearning.org
expressway-edge.mlsd161.org
2.bronxbetterlearning.org
mlsd161.org
nes.mlsd161.org
mlsd161.org
fms.mlsd161.org
ems.mlsd161.org
expressway-edge.mlsd161.org
benjamin.bendist25.org
mlsd161.org
mes.mlsd161.org
acrma5.org
admin.cms.mlsd161.org
expressway-edge.mlsd161.org
acrma5.org
acrma5.org
acrma5.org
mlsd161.org
mlsd161.org
ghes.mlsd161.org
www.athlosindiana.org
admin.bb.wusd1.org
2.bronxbetterlearning.org
vpn.mlsd161.org
stnorbertschool.org
lincolnhornets.org
spes.mlsd161.org
vpn.mlsd161.org
2.bronxbetterlearning.org
vanguard.mlsd161.org
admin.mlsd161.org
admin.mlsd161.org
poes.mlsd161.org
mlsd161.org
2.bronxbetterlearning.org
admin.hps.aacs.net
spes.mlsd161.org
mlsd161.org
mlsd161.org
kves.mlsd161.org
lhes.mlsd161.org
fms.mlsd161.org
2.bronxbetterlearning.org
2.bronxbetterlearning.org
admin.wuhsd.org
les.mlsd161.org
2.bronxbetterlearning.org
admin.wuhsd.org
2.bronxbetterlearning.org
cbtech.mlsd161.org
2.bronxbetterlearning.org
pes.mlsd161.org
expressway-core.mlsd161.org
aacs.net
2.bronxbetterlearning.org
admin.ces.columbusisd.org
2.bronxbetterlearning.org
cmms.mlsd161.org
cms.mlsd161.org
mlsd161.org
admin.athlosindiana.org
2.bronxbetterlearning.org
2.bronxbetterlearning.org
poes.mlsd161.org

Certificate

The complete raw certificate details for expressway-edge.mlsd161.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxR9NCvbm+Opt7AfYifPi
ApMmywokmRbEbyM/qpczsumhGwGc08ut9OE4RM6Aet9nKKL51xgKOLuCqX4Gxi/t
HQcLUWtGBmybZdHzWpjoYHgRPY9uAYUyYtPkfjzN7EnwIdsUrnOWppfVuqq6F2g2
IC6vZCfj1S31WyfoTdFHvm5p/UyvSIbQOw1LLfgUOBMONxg8/uT83yM7OudKuAgv
4d7aEls0QPM3QEHyPSjMgxvPJbIxJfsaPpSmxNLHAWXsN5yWmaI4xbzj3y2bu0tY
0zXM8ky7ryluSau/k4DwkWFEEUT/Qr6WfANfngmkIdzBMGgW8vqXQVF5ZOYldkJi
hvIkRgFNqwpSQyBKKARbMXc6mrC9vVbSnzQ5qXvrzzegzzitU45h2czyywPbJhij
2J4wBHdewvGorrNEQz3iVYWQZA66lwszBuXP8Ofy2cVYSdeGh85hzuzfcW2KFMOw
/3f7SssIHgTtfal2cTIM7TZdVYhf8QMY1Z1vCGgvK89MaP6FKqODvGdproW1TnJL
WRIpWCMBvwyhNf92lluQtS37RqPVHY12zuBeYI9ejOa7xYjXw+sAvhB9OPcv//MD
Jgyb2heZt2H9owcyQ9LeuEheCeE5G72WiV03pqFdhyprZRpXDBAu5oHJ5FG0sQWg
luGFZJKxlgS9ACJL+6o+XbUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17334568668629067174779424021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 22:41:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-29 22:41:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expressway-edge.mlsd161.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804188696747986126947952904979504652172286596320141080826382462583736808621969496997107442801650201411094585564470512045516950446372025128639044450594023753307517095662983429796623786393990477451107134665591443532703937847698001031114975451449318906755235525867165974736640568901937434930220930209860739148390994396041988069995388133589713216904519948959237066714463113533519177073729157261759073202578006115152896116439208334531616411937766519620796041100639246756933300744164451290867606956852910598035600030798950482105945665561275150657388682625758837208940272794604263834386627353118366020725103138235868875184114297584897836773934634397683152686193233093796155141156255383157847915942925863854542520737663898850606564759777840232650960938658320751463603437980426890595843139522250777195850535268147703654647989979879350980150197363221040857216978178014725803790397027536881667950045361485828130910929472487814267270057772322334397324972114471789828226910069489293743713399649054545333084322442476684463427348521225529248249420035088222393044394425385253371289701282513434061210721507655393863615278175870384549984252878331168750387141384644655280108338159426790094076174703025171302499023490714362761111633827734256070386671029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressway-edge.mlsd161.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressway-core.mlsd161.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.mlsd161.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8193ebd7b431e2b83fb80b54ba6504271dd36128
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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