api-mllm-ref.m-team.be

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 76:33:ac:69:e8:b2:3e:ad:ab:45:21:b0 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api-mllm-ref.m-team.be

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 76:33:ac:69:e8:b2:3e:ad:ab:45:21:b0
Serial Number (int): 36581700576429778794191331760
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b4:96:d6:6b:0f:7b:12:1d:38:4e:16:d0:d2:ba:5a:00:26:4b:6a:58
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): c3:db:af:93:09:14:1b:32:b3:81:2b:83:45:79:7a:e0:13:49:3e:23
Fingerprint (sha256): 78:53:71:7e:13:3a:43:44:6d:c1:8c:98:7f:59:57:aa:74:97:5e:5a:55:66:31:71:3e:ad:6a:41:8a:09:a0:8f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate api-mllm-ref.m-team.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-mllm-ref.m-team.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-mllm-ref.m-team.be

Other certificates including the domain name m-team.be

(limited to 100 certificates)
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
oobbackup.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mllm.fes400.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
openzorg-ref.mnnz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
fes400-ref.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
access.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
s000lpopenam40.m-team.be
mloz.fes500-ref.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
bcmnotifications-mllm.m-team.be
mloz.fes500.m-team.be
api-mloz-genesys.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
poolfe01-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
sni249703.cloudflaressl.com
api-mloz.ref-genesys.m-team.be
api-mllm-ref.m-team.be
mnnz.fes200.m-team.be
sni.cloudflaressl.com
fes400.m-team.be
sfbweb-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
poolfe01-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
mailservices.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sip2.uc.m-team.be
openzorg-prod.mnnz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
s000lpopenam40.m-team.be
sip.uc.m-team.be
fes400-integ.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sfbweb-ext.uc.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
api-mloz.dev-genesys.m-team.be
sni249703.cloudflaressl.com
*.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com
openzorg-ref.mloz.m-team.be
sni249703.cloudflaressl.com
sni249703.cloudflaressl.com

Certificate

The complete raw certificate details for api-mllm-ref.m-team.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14LjBhlhn9uNArangu4O
9SZ/oc4oYcKJ1o58BOl09ueqJPG0x2daf3whS+1uaQgbYE1+sEmAv5DOJBOIiVHv
01GbkraSiznL7RViP0lniGSxfOf4S9OHWNqvbeZZVzBnjB5a1bnJM+zOVSPcsCVd
jr7VWuv0pciV3clCwMv818tiFDpFe8JJ2X4yknSwBOs6Foiate0j9HvAdyDqwjWF
//jLC/QzrxYsTJKyIrYp1TPwFkIEXmNo94LnMHmsKdvMe/j8VtwzMLecsgNS0eZO
d0WTm4Zi386gv7g67NaY6VqYwiyPa+5ubR4RSq7YYZRTVT6rWbnLcmpu9900tMq6
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36581700576429778794191331760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 15:37:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-25 15:37:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-mllm-ref.m-team.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27205778260147956798244883781979548052590298096115662263718706211735973412174792811669267308704008465986074707735927256346190110066731892307047518549523175035072656718746290311225642224354060530885180453167076813185166173311438452330433660085916889079308094393077484040719182908410615748322897327727363849120722180045585040862344031382121566017021917291343333630016746424157365856508688146213411725119974749427077391086004397472507872236344723757799848009843643633274791139069799792300010538438639990907401332621934756371091317525758349926017213960784386100791882604748420875828340373064814916748646447297161679518247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-mllm-ref.m-team.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b496d66b0f7b121d384e16d0d2ba5a00264b6a58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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