weblogin.frontdata.dk

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0c:0e:80:da:55:cd:48:c0:fe:ae:a2:d1 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=weblogin.frontdata.dk,OU=Domain Control Validated,C=DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:0e:80:da:55:cd:48:c0:fe:ae:a2:d1
Serial Number (int): 3731353569813438873606202065
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: df:f0:06:cd:9e:de:fb:41:8e:4a:be:5e:5f:b7:f6:46:e6:01:28:d3
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): ab:4e:c9:04:75:61:a4:d8:0e:00:7d:57:b9:50:1b:7b:97:55:e6:89
Fingerprint (sha256): 78:de:35:45:82:19:09:bc:aa:b8:27:8d:a6:2c:7b:0c:8f:80:e8:cf:a2:6a:a2:1a:8d:34:51:b6:e1:cc:de:06

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate weblogin.frontdata.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weblogin.frontdata.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

weblogin.frontdata.dk

Other certificates including the domain name frontdata.dk

(limited to 100 certificates)
sts09.frontdata.dk
login.fd02.frontdata.dk
Mailsecurity-rel1.frontdata.dk
fep.lync01.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
sip.itrelation.dk
fep.lync01.frontdata.dk
Sip.lync.frontdata.dk
*.frontdata.dk
www.frontdata.dk
weblogin.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
www.frontdata.dk
ssl.front-data.dk
cas.frontdata.dk
cas.frontdata.dk
weblogin.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
weblogin.frontdata.dk
login.fd09.frontdata.dk
vpn.frontdata.dk
soc.frontdata.dk
login.fd09.frontdata.dk
internet.fd09.frontdata.dk
weblogin.frontdata.dk
Sip.lync.frontdata.dk
internet.fd09.frontdata.dk
weblogin.frontdata.dk
ssl.front-data.dk
cas.frontdata.dk
weblogin.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
internet.fd09.frontdata.dk
cas.frontdata.dk
weblogin.frontdata.dk
sip.lync01.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
sts02.frontdata.dk
lyncdiscover.frontdata.dk
sip.lync01.frontdata.dk
Sip.lync.frontdata.dk
weblogin.frontdata.dk
sip.lync01.frontdata.dk
ssl.front-data.dk
sts09.frontdata.dk
cas.frontdata.dk
sts09.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
fep.lync01.frontdata.dk
sip.lync01.frontdata.dk
auth.fd09.frontdata.dk
login.fd09.frontdata.dk
sip.lync01.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
fep.lync01.frontdata.dk
sts02.frontdata.dk
fep.lync01.frontdata.dk
cas.frontdata.dk
sip.lync2.frontdata.dk
auth.fd09.frontdata.dk
cas.frontdata.dk
ssl.front-data.dk
ssl.front-data.dk
sip.lync01.frontdata.dk
ssl.front-data.dk
soc.frontdata.dk
*.frontdata.dk
login.adm.frontdata.dk
soc.frontdata.dk
internet.fd09.frontdata.dk
fep.lync01.frontdata.dk
sts09.frontdata.dk
cas.frontdata.dk
vpn.frontdata.dk
weblogin.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
login.adm.frontdata.dk
weblogin.frontdata.dk
*.frontdata.dk
www.frontdata.dk

Certificate

The complete raw certificate details for weblogin.frontdata.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CPEZNI88oL9XYEaswMT
taV+oYEMtgoNsC+Uf9O/3VpY49Eu9y1SZ50hszkrp0tlvrScZkiP+k1REqlCGrsx
eCyh3MXjaJVRkuUCiYO1Qe8G0iMGIAxJdPnZWigvmC8Mk5q0iepTWD1BIZBKwVNZ
NnnhxKR2YdQOgFXEsUiuzD+zET1QN5Izp95v79DVJfHBu/rFgWIJKyA8pSW3oGGv
nzaLwCorfM/jeJhJvpyC1qctR/pwQo/H7fa54kMKodnYwiw4ejZrWEN9BGi/sGvy
g4qjXM11pIwsVYFys5MI9L/i4p06228d0RE60j0hs92I7sFg0X800b61J27bUial
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3731353569813438873606202065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-25 17:37:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 17:37:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weblogin.frontdata.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30314830637488176880705582440993342830153110869748894593774894202490642224541681684200378870441848229408902520379305886945863536988083825493898741532891166912017676447652858470385725333125778520745001652493770739013902881253554131926957856763836098784145406211103563191566169191103583536239188710946390824342322885046259103575019836603860358284069421795855578754374857066285759772430120005838883743091582362156834501884385784272806030130397681217124781108239981987296817427661428787307991466763943678012559258680505737571771366974948590020009735644606835213804975270815820589452246930707068699700657749099569845019963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblogin.frontdata.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dff006cd9edefb418e4abe5e5fb7f646e60128d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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