*.fonyou.com

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 71:10:ef:ad:8b:a9:61:68:34:5b:e0:66 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.fonyou.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 71:10:ef:ad:8b:a9:61:68:34:5b:e0:66
Serial Number (int): 34992280769865639372173074534
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e0:9c:90:c4:fc:88:9f:67:d4:a3:ed:93:93:10:c8:5c:f9:61:8d:7f
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 77:d8:5f:32:dc:32:14:99:f2:32:3b:a2:66:ea:9b:5e:bf:42:9c:06
Fingerprint (sha256): 6e:e3:92:0b:ca:25:24:5b:36:65:cb:5a:07:6b:55:d5:05:8f:6a:fc:ba:72:41:0f:01:4f:c3:eb:62:84:c0:73

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate *.fonyou.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fonyou.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fonyou.com
fonyou.com

Other certificates including the domain name fonyou.com

(limited to 100 certificates)
vega-mobisitedev.fonyou.com
operaciones-mx.fonyou.com
www.sivvu.org
*.fonyou.com
mandcdistributors.com
auditaum.com
dev-api-citlal.fonyou.com
m2.fonyou.com
www.tomealsoft.com
users.fonyou.com
www.admin.ailahealth.net
www.sivvu.org
lab.fonyou.com
*.fonyou.com
suvidhamart.co.in
www.clickstory.io
www.clickstory.io
blacklistcetus.fonyou.com
my.everywhereco.com
elitecloseprotection.co
stg-citlal-user-space.fonyou.com
lab.fonyou.com
*.fonyou.com
*.fonyou.com
*.fonyou.com
cashin-test.fonyou.com
cambridge.mathematic.org
services.fonyou.com
diziconnects.com
services.fonyou.com
aolar.com.br
*.fonyou.com
*.fonyou.com
preprod01.fonyou.com
preprod01.fonyou.com
dev-odatos-vega.fonyou.com
mep-cn.fonyou.com
www.b3dhub.com
mandcdistributors.com
users.fonyou.com
www.tomealsoft.com
bamboo-note.com
shader-studies.bouze.art
stg-citlal-renovation.fonyou.com
hubble.fonyou.com
savingfor.life
m2.fonyou.com
my.everywhereco.com
www.artist24.com

Certificate

The complete raw certificate details for *.fonyou.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMsK/k56A7yGNMkgoPHz
vGGWjf0pWP8UwyUa/++uofCn/WUnDwSCbXNmbRCfjNZApgF4/zBJBrKKM0Peh4PI
Pn/B59ZDcsHPUqZ08vkU2mr7rXtEdMGk+Vg8uroEvbN6yfRVVsWBLsZ7wa1MCDdz
ZRPqaFUCtHn3ZhlE5x/Ns/TeK8GJKeKlLMphEhqnljz78Tq4IL7NGJgKXmg8qOBk
AoZQILtgsmD8d1nG5y8weARw3WdQcujX6C8SkTta3r8pJXXYrWiWUV5FHyfZzAgl
rYl+DOlVXMlWt2SYOeukhLSKXJKtiFyzZg/BxuwrPKugekG8StI3x7c1fVCgQEQH
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34992280769865639372173074534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 06:14:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-22 06:14:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fonyou.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24337878760312465298095331511249636861453739071105155068907521720571667713154139880015365017766762240816523323347148015785224916278324555842583270590222283493408495250315185183218273826195432289276260765733330013555938911704732040564134016062704040442769409448825503958436111509073661899692378534012089120757815888344353109080503808741970352122764688779135588831557074678827679196322953154295728609546438065080074333484477418722235337416867419763087259074353697697963488451068945679698643058323762341164710853209070973872848321865914239788260667145652786185403845843160541126462484865728912715171449382871392657344447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fonyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonyou.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e09c90c4fc889f67d4a3ed939310c85cf9618d7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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