webmail.kennisnet.org

- Stichting Kennisnet -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 24:27:ad:0e:47:46:86:28:ab:ad:a5:2b was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Kennisnet

Organization: Stichting Kennisnet
State / Province: Zuid-Holland
Locality: Zoetermeer
Country: NL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 24:27:ad:0e:47:46:86:28:ab:ad:a5:2b
Serial Number (int): 11189425693325286426761078059
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c2:eb:d9:ce:25:c2:2d:fc:27:3a:99:2e:9b:b9:cf:42:f6:59:c4:5a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 84:7f:c3:52:22:6b:48:f6:c1:8d:b2:c4:c6:7f:59:b3:28:58:0b:93
Fingerprint (sha256): 7b:9c:bc:a8:90:cd:8c:fd:1f:14:a8:f1:18:b2:f2:f9:12:ee:63:1f:c9:2e:d2:5b:ec:9e:9f:96:36:3a:36:96

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate webmail.kennisnet.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.kennisnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.kennisnet.org
autodiscover.kennisnet.nl
exchange.kennisnet.org
autodiscover.kennisnet.org

Other certificates including the domain name kennisnet.org

(limited to 100 certificates)
webmail.kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
mysite.kennisnet.org
*.kennisnet.org
kennisnet.org
titaan.kennisnet.org
samenwerken.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
kennisnet.org
hotspot.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
fs.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
webmail.kennisnet.org
*.kennisnet.org
vpn.ka.kennisnet.org
support.kennisnet.org
kennisnet.org
kiwi.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
support.kennisnet.org
support.kennisnet.org
kennisnet.org
donald.kennisnet.org
kennisnet.org
*.kennisnet.org
support.kennisnet.org

Certificate

The complete raw certificate details for webmail.kennisnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkBHs8shn6caUPgHZxjB
wc5+kJTDDFBb0FNgmxC751MFfxsxtv5WM7SLqbEbP1SehJVKnzJaxL+bKdyF+Mkm
nzoTo/DGp1P3QlNvrZ6jxA1DibTdsWYmVMnauo55Q3qITTeoDLWGzqiUlI0ehaUX
cujxtvmmHHlBxxgplYzm4iEmrpOBONC+4FPwT/EFbc5zX5vIHg41f3L4jqgd5UWw
D01rG030XXhWYY0oZq4nNTYClscHmMNRPZh91HeRJoj1eO/5kL/RFhgFde92BZEU
Z7w1Uf0fd0Jc8+9juXO5dD4LpFr1o5PoND71TomVSgD7fDCLox0Yi1blWnOZOaJk
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11189425693325286426761078059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-21 14:56:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 14:56:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zoetermeer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Kennisnet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.kennisnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21492209536607998575523356949648611257886170698498799672873175542112339327109523968590370698544563820423782838996854033678416640842478639950980828894548752897963868734534192743151114770747730167450634910144701805200522608769436124999560774138941620194969882573031773571356122346827884583352331385551567944809438634859313703319882283142284300719720144533055638115334215420261406320322716926795599022256933212661920880337756196818946586375273706189943027680470446625083636317732863433002336404510782172212542424276492369098246932194904286207161758759843923886169640838789066616261850756846474778591828043301527499203809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kennisnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kennisnet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.kennisnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kennisnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2ebd9ce25c22dfc273a992e9bb9cf42f659c45a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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