api-mloz.ref-genesys.m-team.be

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 60:48:3b:8b:ba:67:11:da:b2:80:d1:05 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api-mloz.ref-genesys.m-team.be

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 60:48:3b:8b:ba:67:11:da:b2:80:d1:05
Serial Number (int): 29797884799013019497504231685
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: f9:3a:2b:74:5a:7d:df:e8:a4:fa:11:c4:cf:d6:86:83:f1:5b:46:51
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 1b:80:61:8b:27:39:02:bc:5c:f1:53:64:30:b2:6a:ea:53:54:3a:99
Fingerprint (sha256): 76:b8:0d:21:ec:29:b7:48:0c:21:c7:9e:d7:c9:4c:29:72:29:dc:d6:29:ea:1b:56:02:5a:04:c2:bc:8e:36:76

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate api-mloz.ref-genesys.m-team.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-mloz.ref-genesys.m-team.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-mloz.ref-genesys.m-team.be

Other certificates including the domain name m-team.be

(limited to 100 certificates)
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
oobbackup.m-team.be
helan.fes526-ref.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sip2.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mllm.fes400.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
openzorg-ref.mnnz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
fes400-ref.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
access.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
s000lpopenam40.m-team.be
mloz.fes500-ref.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
bcmnotifications-mllm.m-team.be
mloz.fes500.m-team.be
api-mloz-genesys.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
poolfe01-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
sni249703.cloudflaressl.com
api-mloz.ref-genesys.m-team.be
api-mllm-ref.m-team.be
mnnz.fes200.m-team.be
sni.cloudflaressl.com
fes400.m-team.be
sfbweb-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
poolfe01-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sip2.uc.m-team.be
openzorg-prod.mnnz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
s000lpopenam40.m-team.be
sip.uc.m-team.be
fes400-integ.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sfbweb-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
api-mloz.dev-genesys.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
openzorg-ref.mloz.m-team.be

Certificate

The complete raw certificate details for api-mloz.ref-genesys.m-team.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWN7RyV57touEjoskjiU
w8Uy2TVl5KAL+GJ6hTk4caz+4fbO0voA4KNKUk/LWyImFBPC+897WFkbXdEPKmAR
zzAnoUfn8+kPBLsgBuU0Bg+a1izWp5l/p6TjH5kgXJ9TP5XB7Erb5rAMgVbPYnmt
L+2BLfcz+PH6oPlvtxlvPa8JdWhD3qlQgtSjpO77H4TKVwFGsthwZT9EYPdlym5s
donlmUhUTS9WS/PTsPoGlhpFlLvrbPbbDWt/B3LY1StLUaR25TFod23X5M93c/D6
ylpIH/wnXpsQX/woZpEafF7rK6nc99V4hqRNUOLAnTKqgtAsuC1uWQFXmuqAR0Bg
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29797884799013019497504231685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 07:52:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 07:52:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-mloz.ref-genesys.m-team.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22393236161795171475900832939186113430901588095820465416048645556163881116111804197346657654926094067644654865308311418524469040983517717650120276176715039985955583060642260895484582035048702696864802016493605499797607357515807330696523304886034996895946753374290609606005981056659210775351844308773891942297348465195403656275146615233903876816392829340274317949208264938105934197403472441675440284024927362119021809356444478585621804001103669220389016366146806334787832543314969047636315915234421543481473585097638978906667496868789602315329859086562247909583794616792215918350903471445442430961613903004931830341789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-mloz.ref-genesys.m-team.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f93a2b745a7ddfe8a4fa11c4cfd68683f15b4651
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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