www.buildingforall.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:70:89:d8:e1:a1:9d:de:58:f7:a0:6d:8e:69:29:f6:aa was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.buildingforall.com,OU=Domain Control Validated by OneClickSSL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:70:89:d8:e1:a1:9d:de:58:f7:a0:6d:8e:69:29:f6:aa
Serial Number (int): 1492287768227389521028459708298780631234218
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: f5:ad:fd:a5:65:a6:4c:ca:dd:85:5f:e1:55:1b:6c:2f:b3:1a:15:be
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 0b:f0:8c:53:90:6e:61:e2:a2:e2:f8:6f:6c:6d:de:87:89:fd:2f:c6
Fingerprint (sha256): 7e:de:48:5a:ae:1e:53:a9:9b:a8:14:de:db:af:49:3a:f1:fe:38:8c:60:fd:1c:29:fa:a9:cf:27:eb:fe:6c:8f

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.buildingforall.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.buildingforall.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.buildingforall.com
buildingforall.com

Other certificates including the domain name buildingforall.com

(limited to 100 certificates)
people.smartapartmentdata.com
intranet.buildingforall.com
reclutamiento.maxtalenthr.com
soporte.buildingforall.com
showtime.studio4.in
sni199603.cloudflaressl.com
buildingforall.com
sni199603.cloudflaressl.com
buildingforall.com
webmail.buildingforall.com
sesiones.laacademiaforense.com
seo.buildingforall.com
careers.reshamandi.com
careers.yocket.com
sni199603.cloudflaressl.com
test.buildingforall.com
buildingforall.com
sni199603.cloudflaressl.com
campus.vitofeli.com.ar
show.ccmtecnologia.com.br
sesiones.laacademiaforense.com
careers.align.build
sesiones.laacademiaforense.com
marketingarquitectos.com
intranet.buildingforall.com
showtime.studio4.in
sni199603.cloudflaressl.com
sni199603.cloudflaressl.com
vps.buildingforall.com
showtime.cloudy.ma
sni199603.cloudflaressl.com
show.sicktechcloud.com
sni199603.cloudflaressl.com
musitechnic.academy
webmail.buildingforall.com
buildingforall.com
careers.claimshieldpro.com
sni199603.cloudflaressl.com
gestion.buildingforall.com
reclutamiento.maxtalenthr.com
buildingforall.com
intranet.buildingforall.com
sni199603.cloudflaressl.com
sni199603.cloudflaressl.com
sni.cloudflaressl.com
support.certitrek.com
sni199603.cloudflaressl.com
showtime.studio4.in
training.theconcreteprotector.com
sni.cloudflaressl.com
test.buildingforall.com
link.buildingforall.com
reclutamiento.maxtalenthr.com
buildingforall.com
careers.yocket.com
intranet.buildingforall.com
sni.cloudflaressl.com
intranet.buildingforall.com
showtime.studio4.in
academy.appsimplantadores.com
sni.cloudflaressl.com
candidates.palettetechnologies.com
sni199603.cloudflaressl.com
sni199603.cloudflaressl.com
sni199603.cloudflaressl.com
seo.buildingforall.com
sni199603.cloudflaressl.com
www.correo.buildingforall.com
sni199603.cloudflaressl.com
buildingforall.com
sni199603.cloudflaressl.com
training.instasafe.com
intranet.buildingforall.com
intranet.buildingforall.com
soporte.buildingforall.com
test.buildingforall.com
learn.marketomic.com
academy.speaknpeak.com
buildingforall.com
showtime.cloudy.ma
marketingarquitectos.com
sni199603.cloudflaressl.com
musitechnic.academy
show.ccmtecnologia.com.br
buildingforall.com
www.buildingforall.com
showtime.studio4.in
clientes.buildingforall.com
sni199603.cloudflaressl.com
show.ccmtecnologia.com.br
buildingforall.com
sni199603.cloudflaressl.com
www.carenetsolutions.com
show.sicktechcloud.com
analytics.buildingforall.com
intranet.buildingforall.com
schulung.hgverwaltung.ch
recetapollo.net
nlpa-support.certitrek.com
clientes.buildingforall.com

Certificate

The complete raw certificate details for www.buildingforall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeZWCiXKGtvl1tYGMn/4
Kgty8GkfU5F457Y2ThvapjmZwDx1t7WJOJYd0gfz65xk5zQg5KPcROT/WtMcu5cG
VwnY+/yj0mO5W+Usi/MwwspSSv5yE1sY5u0//JwAlDQjMktJ55RKpTyGPsOq+xfS
P01++IeV038B8senWcghlJKdv1nx0qAEz1cfHkCW3oVTfDOlwKWEtB3HZAXk6LDc
Hko84K3G0nCMAoYxSKteyhEOTuQO0XPLsMBfbnB8sTxGdG1HaPbUzhifxL6y8A6r
SG5W4mhgwbuER+XruwT1opyPMd7fYMInSDqrylwETqn1rHmneykz/Ag1SpuICxCG
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492287768227389521028459708298780631234218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-11 09:51:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-11 09:51:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated by OneClickSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.buildingforall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24982529038741468084955151469676121423293256737840596346595816561745802346269164759851394415452611701646589436538215791282798522699050922612063804756623793406227521061701605372925530128661306769152336971513395373429250370113589298316620456846718022400131175460379894187353055111715105618375478899654331905394073083828821751901730068350850878838537088940322581636277339677249826308072034993757350057106310227275243537221103387315313812911354441267702331607379510641680053420542544645513422434525442477111848447984155105988287042237618376262988890583501665628506232615693590381113997652472361460503925633515017708013251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildingforall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingforall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5adfda565a64ccadd855fe1551b6c2fb31a15be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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