owaaddin-test.rsyd.dk

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 19:cc:27:09:02:a7:47:c2:56:5f:67:7f was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=owaaddin-test.rsyd.dk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 19:cc:27:09:02:a7:47:c2:56:5f:67:7f
Serial Number (int): 7983930451239740058493740927
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 3e:85:1c:c7:e9:b4:ab:9d:8f:be:0d:04:ca:a1:2f:c2:3e:d0:93:fd
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 42:80:04:c4:99:a6:0c:77:59:7f:5d:91:91:62:f3:ec:82:5c:c7:67
Fingerprint (sha256): 76:f4:ba:8b:ba:b7:52:4f:33:ed:ce:bd:c8:8d:97:24:41:b2:a5:f2:af:b4:f0:31:c2:c7:2a:ca:cc:29:64:73

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate owaaddin-test.rsyd.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owaaddin-test.rsyd.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owaaddin-test.rsyd.dk

Other certificates including the domain name rsyd.dk

(limited to 100 certificates)
meeting.rsyd.dk
mammo.rsyd.dk
fs.rsyd.dk
*.sepo.rsyd.dk
vpn.rsyd.dk
vpn.rsyd.dk
expe02.video.rsyd.dk
orbit.rsyd.dk
srvodevidexpe02.rsyd.dk
ngdp-sepo-prod.rsyd.dk
open.rsyd.dk
*.rsyd.dk
fs-udd.rsyd.dk
fs-tst.rsyd.dk
Hybridmailflow.rsyd.dk
mammo.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
EXPE.video.rsyd.dk
JGEXPE.video.rsyd.dk
expe02.video.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
*.rsyd.dk
ngdp-sepo-test.rsyd.dk
intra.reg.rsyd.dk
intra.reg.rsyd.dk
vpn.rsyd.dk
praksis.rsyd.dk
ddl.rsyd.dk
EXPE.video.rsyd.dk
fs-udd.rsyd.dk
stssig.rsyd.dk
*.rsyd.dk
vsp.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
meeting.rsyd.dk
*.rsyd.dk
*.jap.rsyd.dk
owaaddin.rsyd.dk
eboksrest.rsyd.dk
*.booking.rsyd.dk
booking.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
EXPE.video.rsyd.dk
intra.reg.rsyd.dk
*.rsyd.dk
vsp.regionsyddanmark.dk
owaaddin-test.rsyd.dk
Stsenc.rsyd.dk
vpn.rsyd.dk
intra.reg.rsyd.dk
*.rsyd.dk
srvodevidexpe01.rsyd.dk
*.rsyd.dk
srvodeExpE01.rsyd.dk
webmail.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
vpn.rsyd.dk
meeting.rsyd.dk
*.rsyd.dk
sip.praksis.rsyd.dk
*.bus.rsyd.dk
*.rsyd.dk
expe02.video.rsyd.dk
*.rsyd.dk
EXPE.video.rsyd.dk
sms-video.rsyd.dk
ddlsecurity.rsyd.dk
srvodeExpE01.rsyd.dk
meet.rsyd.dk
sip.praksis.rsyd.dk
mammo.rsyd.dk
expe02.video.rsyd.dk
*.indsend.rsyd.dk
*.rsyd.dk
intra.reg.rsyd.dk
jgexpe02.video.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
test.udkaldssystem.rsyd.dk
fs-tst.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
zonith.rsyd.dk
s201dc-ExpE02.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
mammo.rsyd.dk
*.rsyd.dk
dankost.patientbestilling.rsyd.dk
*.indsend-test.rsyd.dk
srvodevidExpE-cluster.rsyd.dk
*.rsyd.dk
*.rsyd.dk
open.rsyd.dk
vpn.rsyd.dk
s201dc-ExpE02.rsyd.dk
JGEXPE.video.rsyd.dk
jgexpe02.video.rsyd.dk
meeting.rsyd.dk
mammo.rsyd.dk
vsp.regionsyddanmark.dk
srvodevidExpE-cluster.rsyd.dk
srvodevidExpE-cluster.rsyd.dk

Certificate

The complete raw certificate details for owaaddin-test.rsyd.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuEGAjqiQMrebfnNXU1B
7l0YYwzohSM1CVaSfmewm9w1uYtPM3FV/+sHrPgzG/IPHEzshZrzFMfdrr42CDA6
admoxrBcmuHYpJvC64wfdh4TlUF2BlSuHaqlJTQesHiKb24IbHK7rY9KN7sWhVgF
UVk/NkLHaWVWP9UV7/ctJL4w7u9MRfbLrUOL9yaqpbSm5dAc02ayq5/rcZ3wongo
RM7xApzGoKcaDqQicmyI97vJRYaEtGJ2q6SLSvL9GrV0tqw4f/SqZHZ8GKqX6sit
RmWmG0oRrJFgs/J5o+Urrml7I7Yn41Cnw0RBBzKmuizvLbRFHqrrCvN9ytnjfGmI
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7983930451239740058493740927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 08:56:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-11 08:56:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owaaddin-test.rsyd.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24096241153009367581166277538817601929730225169890751441062675252918782475183008433228771881357314687785973802247467247380030150274375269212312397059807917864091277802217990725847868904875878670520215053239853884443022098235529007492272543148703640965407080588112370183138391521306495460291513133170921669912157740556124456674284211064293333529962171576239855468893832485354839544923703033968780102652847539149521133096080955859774181534632396910202047910630652370607135931465096245098019620071959958350379109751791913436238676905872859508795108491623964424637269008338999666270319688044993779482687925160747364616409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owaaddin-test.rsyd.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e851cc7e9b4ab9d8fbe0d04caa12fc23ed093fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0022e71cd452b6f5380c9df98f8521e1b4d7be12abdf02b07147c3dc6b9df7d47d09e75eadb58013bb490107c37aaf1f76401eb2ccc50af27e8b23b7fc7b0b7f2f80c16d977cb02721b68815fc754fc775f70039e6a94533001c0e8db04563985105a0b2c35e7e606e84bc9f67af0b5f9c364143897667fae0c6f8a1817a421f221197e23ced65001a626620f5996e1a0a463e8f8180e3de20798b68f74785fc6108485661306e922d5709e3b5dea10c891e92e0a351e4b154280042d814677036b415db6582dd6e7910e3f88175dcd3bd2ae72e1cbcdf25f7812334c414e1975ccf5528629152c611eb1ab30a5756371150c0d5c6c562444a19b5a71200e9735f