university.mazars.com

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 01:94:4e:12:e1:08:c2:bf:01:fb:e9:ac was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=university.mazars.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:94:4e:12:e1:08:c2:bf:01:fb:e9:ac
Serial Number (int): 488774723966791929655191980
Serial Number lenght: 89 bits, 12 octets

SubjectKeyId: 38:48:ca:63:ea:b1:27:d7:3e:d6:8a:2e:67:b9:f8:7c:35:86:98:20
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 1f:3f:be:4b:f7:87:b6:ad:a7:fa:12:4f:bf:cd:e7:50:be:11:c0:72
Fingerprint (sha256): 6f:29:30:d2:d0:7d:6b:49:3e:52:c0:e7:f8:82:ca:a8:cd:6b:a1:3e:66:4f:c9:4f:ea:2e:d3:9e:8f:49:dc:de

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate university.mazars.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for university.mazars.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

university.mazars.com

Other certificates including the domain name mazars.com

(limited to 100 certificates)
businesshub.mazars.com
www.ecommerce.mazars.com
businesshub.mazars.com
blogs.mazars.com
ecommerce.mazars.com
lookingfortalent.mazars.com
university.mazars.com

www.mazars.nl

*.mazars.com
incontrol.mazars.com
ecommerce.mazars.com
moffice-api.dev.innovation.mazars.com
access01.mazars.co.uk
www.mazars.fr
fre.into.mazars.com
www.mazars.fr
*.mazars.com
*.mazars.com
businesshub.mazars.com
mazars.com
*.mazars.com
businesshub.mazars.com
optimize.mazars.com
ecommerce.mazars.com
insidemyphone.com
businesshub.mazars.com
businesshub.mazars.com
*.mazars.com
*.mazars.com
MAZARS
*.mazars.com
www.annualreport.mazars.com
tomorrowsaudithackathon.mazars.com
businesshub.mazars.com
www.ecommerce.mazars.com
mcount-api.dev.innovation.mazars.com
www.mazars.fr
bim.dev.innovation.mazars.com
www.mazars.fr
www.ecommerce.mazars.com
nothing-to-hide.mazars.com
university.mazars.com
www.mazars.fr
university.mazars.com
financialmodelling.mazars.com
insidemyphone.com
financialservices.mazars.com
*.mazars.com
blogs.mazars.com
insidemyphone.com
insidemyphone.com
ecommerce.mazars.com
insidemyphone.com
mail.mazars.co.uk
fre.into.mazars.com
access01.mazars.co.uk
www.ecommerce.mazars.com
university.mazars.com
*.mazars.com
moffice.dev.innovation.mazars.com
bim-api.dev.innovation.mazars.com
www.mazars.fr
ecommerce.mazars.com
www.mazars.fr
*.mazars.com
www.mazars.com
insightsforgood.mazars.com
businesshub.mazars.com
businesshub.mazars.com
businesshub.mazars.com
*.mazars.com
veritas.mazars.com
insidemyphone.com
*.mazars.com
lyweb01.mazars.co.uk
net-zero-hero-webapp.dev.innovation.mazars.com
mazars.fr
www.mazars.com
access01.mazars.co.uk
*.mazars.com
insidemyphone.com
*.mazars.com
insidemyphone.com
veritas.mazars.com
*.mazars.com
financialmodelling.mazars.com
access02.mazars.co.uk
*.mazars.com
insidemyphone.com
www.mazars.fr
*.mazars.com
mympp.mazars.com
financialservices.mazars.com
www.mazars.fr
iframes.mazars.com
www.ecommerce.mazars.com
ecommerce.mazars.com
insidemyphone.com

Certificate

The complete raw certificate details for university.mazars.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 488774723966791929655191980
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 22:27:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-19 22:27:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'university.mazars.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795078414439991684178680675357508816272472437976326193277556161672304917224265663153888870987021334609593842799385451573645727425683294647433403861644324669562468753187289870572443303826144153533503553094215740144461677473742335685036513922331047969664266676939576323873071990186312877558121814790501431186622464281680949625552438347461523012786718335183538471238696794201670363695138605812430613541323095921226006543537120984035585899800726447864418888313423324237011302989683766286374159910356481919827772561299634886268822574204644351456901637727629084110920389810801592097224445642281666606659584410096471093724921421461413066213902075773627283750372470475226574311645925361758747527287253932876050823426668578849767506712301015929443767849184897957765456832024168085635417225554623287451283209436396772515833081737966844586377100481285102060867346601529975765067818432110283312861273064867061950135363761026199063559376689674508037559622159528493447225950388217370556779906191579231760885907348889818714030894738359653475156963351326957883599680891541733204294833614360721919986611420363155808257430476462108227461772671800608343757732818430930612421381749879583563375289959493730336094499811277521360918722920240038767537278009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.mazars.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3848ca63eab127d73ed68a2e67b9f87c35869820
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009d04546f041fbbe8f32a4f7585d2953ba30806f985e3f6d6bfafe4ec46a54c7cc191ae1034a1168b58afde810271335a62d789a964cedaacbe384604de29823e0a5b78e8fe3534987b131e2e2bff8e979ee1d76b895c6775c8189310d4f32bba7003f413bc8a9bba1833080b4aab43b29e69912e66fc37e3bd2e7fd3d29ae1c9b56bcfbe9e0ec082c2d077ba0425683c37197719dd122cab290d6f321d65ff42c12d4949d0ca502493a5e8b52d9b58144807210c1f6bb133c346b8a5cece058c1c94542890c9fc6520a490409992b6fd916ad085fcbccdf33915854c5c60aa00abfae0d73cbae368e6c5cf71730bb400744926d92817603881f144d6345ed934