lyncaccess.spv.se

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 48:9a:50:9f:e0:32:92:2a:43:ae:9a:f6 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lyncaccess.spv.se,OU=Domain Control Validated,C=SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:9a:50:9f:e0:32:92:2a:43:ae:9a:f6
Serial Number (int): 22469476021863570656077978358
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 71:e7:ea:9e:8e:76:f1:50:bb:e4:2c:90:9f:cb:36:ba:59:6d:4e:37
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): df:71:f9:6e:a6:39:30:ed:a7:14:ea:c1:87:f5:b1:ec:c6:2d:9e:96
Fingerprint (sha256): 6a:04:96:43:35:2a:87:ee:56:a4:c7:08:6e:ab:68:31:b6:85:46:a8:3d:da:9f:42:e9:1f:7c:3b:6a:47:e8:62

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate lyncaccess.spv.se

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncaccess.spv.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncaccess.spv.se
webcon.spv.se
sip.spv.se
avext.spv.se

Other certificates including the domain name spv.se

(limited to 100 certificates)
www.spv.se
*.spv.se
*.spv.se
*.spv.se
*.spv.se
www.spv.se
spv.se
webbmail.spv.se
ap.spv.se
test.spv.se
webbmail.spv.se
skandikon.spv.se
skandikon.spv.se
www.spv.se
spv.se
secure.filer.spv.se
testskandikon.spv.se
lyncaccess.spv.se
lyncaccess.spv.se
secure.filer.spv.se
*.spv.se
webbmail.spv.se
*.spv.se
lyncaccess.spv.se
edgeproxy.spv.se
sip.spv.se
acceptanstest.spv.se
portal.spv.se
lyncaccess.spv.se
intern.spv.se
www.spv.se
extmail.spv.se
www.spv.se
eportal.spv.se
webbmail.spv.se
edgeproxy.spv.se
edgeproxy.spv.se

Certificate

The complete raw certificate details for lyncaccess.spv.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOOocDeXQdNYU0wCZdky
0EE6MZIj26Tqk3CJGXATsKKgh9sx4BAIyb+FxTLnYycDuJL0/pBX1R3T//GGUrMz
c63rVcjBkbgksRT1jpx5MY/GktTNpCupeIlqzrxNILVeaamAThdg8IAvlv6s3zox
n6541Ee0zUrjaHsNdhr1zsKD1/drbvPOYjjXvYkCQXyZfnTDnmxLrrEzmZDygmeB
2oJ4RybF32xBbjNHDoMJv03RHAvYtVOSg1oZPbdXwiMDFLNEEg97csy4BflLuk2r
bgt0VaCUY6Zvn4lBYy95cXtutsk2OmIgYdNMo6FDVPK89Q5+Icknk2PC6q0yjMUu
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22469476021863570656077978358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 10:10:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-21 14:24:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lyncaccess.spv.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20815344339716845228606771660008255097314319410246577102023137801741479141747058627222242757700536351139871490336688099970805269929692132341690090192167572946748104170777787509623270075794666715771670969646410520406165264269834135274677740928860616881590566021802821658934922649245347090145090474671040075984930783530599629045695543896983214794469033216341879182779849271145876155511439390652703422172172396118801529598212177253016792283665951972681979633114614525316056802261250577155461549114196057197360444916575807051062343930652444122522109583929170841053356132814457675004814110123089135423677644123532731690549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncaccess.spv.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcon.spv.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.spv.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avext.spv.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71e7ea9e8e76f150bbe42c909fcb36ba596d4e37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c5f9185f3a9d4ebc2b53c2e5510ee048985699320c3c584aed739c6176b6c4b34bbbdbf6680e93ee1ce34b330ac6067b46ea0fefa26c584b2027dcb98716f9b20dcb21e19fc4e83c015e4bc785259b173661c0c7b807a9d2d4d0e9eb6bf903ac1f2c20424ddf8c2c2b1a6d10db1107f5d323b53247cd61ce8923e481190bed8713e698d0360e453054e8e2deb6569def2935cc0dff00bc5d55f1bbc34beb4b883ad126a94415c59439be1e4633204b0313221bd478638c481a13c3b4b7f2ea24cdc12b2aaaa795751571af07f39ff037cf690b9a7d9673df2a4d1631915781aeeca510d2e8f2d6bde4051c848c9fb42b214f3a2028585f3e58ed42289e7795d