www.xn----ctbcqgmbxessq.xn--p1ai

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 58:67:23:cb:64:a0:1a:b6:60:db:a8:43 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.xn----ctbcqgmbxessq.xn--p1ai

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 58:67:23:cb:64:a0:1a:b6:60:db:a8:43
Serial Number (int): 27359369258465445024074803267
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ed:4c:46:3b:ed:28:52:e7:b5:ee:ae:4d:3d:72:ce:87:94:2d:13:c5
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): da:e8:43:25:1c:95:fe:f7:06:1a:e5:a7:5a:1e:15:80:78:5f:1a:3f
Fingerprint (sha256): 7e:41:58:50:3a:f0:65:b6:d8:55:aa:c2:10:db:ac:62:48:ff:68:96:b4:e3:ea:f1:cc:e0:f0:1e:4b:5f:6f:6f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.xn----ctbcqgmbxessq.xn--p1ai

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xn----ctbcqgmbxessq.xn--p1ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.xn----ctbcqgmbxessq.xn--p1ai
autodiscover.xn----ctbcqgmbxessq.xn--p1ai
mail.xn----ctbcqgmbxessq.xn--p1ai
owa.xn----ctbcqgmbxessq.xn--p1ai
xn----ctbcqgmbxessq.xn--p1ai

Other certificates including the domain name xn----ctbcqgmbxessq.xn--p1ai

(limited to 100 certificates)
www.xn----ctbcqgmbxessq.xn--p1ai

Certificate

The complete raw certificate details for www.xn----ctbcqgmbxessq.xn--p1ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7PjEHZq2XLtXruDiaipL
AUrEIn/BGwj+AykY+tgQmTljEb3I2JmmtqtlMBqUu3pPi2nP00xMvg/9+QCmmfnO
/DeS1N9lCyugPmNdRigMYULCyFXFqvUe4+k50XwAusZtO2FilN1FC4ahvIADCrZF
NFFeof8QeVBrirPLhQamUEHpQiB9GIYVLqPFu94gPRhuEQ3GEYFNiz2NLS5nvYoy
x09S5HOP8E4tNQQrrHO5ag8SgFQMVOs57PbCSWDblyDVZkYuaaGnzXGvHkp4O09d
9LrupU/ZlAbae6BeileBH9gRPd7vke908QwvyhzysOZvmopQMANK/Qq1OXZUbYx3
WLx9TUf21o+nmFYsonOHiHyIV9ODxkIYxz65KZK67PSXSdbUoD7XbQJTzo2H7nq0
FtuhA+FLhKgm5Ahtfga7mj1ne/8dRvzo47VrQ6gahfhgfcZ87VE9qtDZ3lNHOlFX
yx61WMUwGLzX8kYjrx9qhYse1jQoRublWilODUSmHDVb1b1alau//Z2PnGnmdOoA
10D/nrgJmAsr4Pe8Elfr3OC+dTG9JTdPeiXmR9c6ux2lsiXCiFre2QGjjHr36JAs
KrO1Nc+kU75a31Wf4QP0KNZW/VbzaGH2PR/a0lW4a/dw+Y//GvYZMPY2rVkraYAD
SkjtL3nTOgtyQudfJwuAUc0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27359369258465445024074803267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 07:38:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 07:38:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xn----ctbcqgmbxessq.xn--p1ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966760363526350485132445574561455244431306514256138338523722836569132751035497279023357245063907746545209228213922309791066073304692575763912725147935053847845249422954233424455770322167612167859205404519045833189341262181225315524331279085702525573660037345245188593183221578160973344436925436054132632260561689136265408316664691413078845329361898684416632365584704667850883775821840570861242055375111325154974878229201297621674927437461241577046826058568077674775569021073935549773891458864172663188065597305056852757213292655617911276211350112501937139906441302631582194396387343308931379190708500125828545856727907970803530376341744050767100851764096191276343982682600897025380317813961091808226563040128196020988111457328244233150457530881975193859402375177985919950733062304540088190258020724366439923656248834263806120676971159410013053429173379523184368917044579570553754009215877101945712271226072194987326245335014006753380985099249417307969717082876035701444420061109848676872222989147338499924569254447894485437325126218297517474311357959295192140180731354022834024098132335087194645334478405483517840807477362714757582292702908271483137288293575006527170752503251247921428298952218726037451489897216999618853144469983693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn----ctbcqgmbxessq.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.xn----ctbcqgmbxessq.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.xn----ctbcqgmbxessq.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.xn----ctbcqgmbxessq.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----ctbcqgmbxessq.xn--p1ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed4c463bed2852e7b5eeae4d3d72ce87942d13c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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