*.tav.aero

- TAV Bilisim Hizmetleri A.S. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 2a:3a:2a:28:af:4c:db:17:d5:2e:73:66 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TAV Bilisim Hizmetleri A.S.

Organization: TAV Bilisim Hizmetleri A.S.
Organization unit: IT
State / Province: Istanbul
Locality: Sariyer
Country: TR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:3a:2a:28:af:4c:db:17:d5:2e:73:66
Serial Number (int): 13068687199927896802329523046
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c0:6b:24:85:ae:50:6b:73:8a:29:22:89:98:0d:c9:9f:51:7d:e1:37
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ca:1d:75:ff:ea:8a:e7:7d:57:13:cb:d4:cb:fe:02:e7:e3:77:ad:e0
Fingerprint (sha256): 93:6a:59:93:12:ed:62:ce:bb:fa:27:e8:12:f6:e1:9e:70:70:29:2c:93:23:45:ed:55:7b:b8:42:b7:04:6d:59

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.tav.aero

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tav.aero

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tav.aero
tav.aero

Other certificates including the domain name tav.aero

(limited to 100 certificates)
sip.tav.aero
san-6-s51.tlsprovisioning.exacttarget.com
webconf.tav.aero
leaderssummit.tav.aero
*.tav.aero
tcs.tav.aero
sip.tav.aero
taalnetwork.com
cwa.tav.aero
sip.tav.aero
www.yzsync.com
sip.tav.aero
fundmy.xyz
san-6-s51.tlsprovisioning.exacttarget.com
cwa.tav.aero
*.tav.aero
*.tav.aero
www.strollerapp.com
www.guchub.com
bulten.tav.aero
www.cno-global.com
san-6-s51.tlsprovisioning.exacttarget.com
sip.tav.aero
www.guchub.com
sip.tav.aero
*.tav.aero
www.cno-global.com
leaderssummit.tav.aero
mail.tav.aero
san-6-s51.tlsprovisioning.exacttarget.com
webconf.tav.aero
*.tav.aero
sip.tav.aero
*.tav.aero
bulten.tav.aero
*.tav.aero
*.tav.aero
*.tav.aero
san-6-s51.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for *.tav.aero in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqFzLAfdl253wVjZMaN2
j2JkkYh/VFzqamnEJm6YWc0lUgJeMkAFmPw5V06qcIsq+yPXviFGW8p9Di3PhQSX
UxG0i3NcFsgua8m20BkD4yHDzwbAz74pq6BOZnOUegSob1+90pqwdI8dygyTLwvR
bbeAXqcDO4iMPKl0EHXfy4m6CjmV3Sbm/UtcecV/s1LwBOaEcQiFo3htRuSOVZle
PZ7his0aS8ncf0rL5iBfNMuVNA3We5uChl+kQuhgD/+OBn7M8loax5xcoqOcjnO2
GazvaNaihF464wYSR6jzfdun68zh/caRYTAAr6Q6Ecqm6NVG1KKnS2ZUkV/ZZsl1
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13068687199927896802329523046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 16:16:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 14:30:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Istanbul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sariyer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TAV Bilisim Hizmetleri A.S.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tav.aero'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22045078972402792217541887627883069322232487930021883206768316829850602803838922711619322975255529914591121024498599765841570474192414654556879781783728414648233401880442315608329167113072028336363518813480151278656178953736873869442037982051643465201773500372307903771492133716548821389506615565767175567840240235717221442720589742389569171993314580557314865995933456817682849626273442486572009986841894320771311933429338781130967897646493841169489920564479897281499651408323890145211192146961063898308342560880585402839692691097797518973913230715966492384174436709095200761924405932720496357856687301625914308785467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tav.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tav.aero'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c06b2485ae506b738a292289980dc99f517de137
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001725c12593c000004030047304502206b32892c0ff2c6ec0c18666340363a994a586b040a9cca09a295090bd8d12d06022100deb8229318dea684a724c14f4e28a3fee4a5a75e68ff0331d1289f0ece5bdbd90076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001725c1255c0000004030047304502210099c7c312468ba40170a4a13ca1c39f2e9c62e5b8e2176f77533920916fe73fb8022070ab70106ccd7ba4f1a02d36895dd07bc8ab7a0008539b881b62820f5d4a1b610076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001725c1257fc0000040300473045022100a6701f86b4cd6fb5e56d94f0fb33c327755bfe9c62c1c28c027926b0d3484a40022077dd02008adcb01e1846bb40c550ed22f2d27d179a05b06af35485f00ebbb6d600760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e5000001725c1258b90000040300473045022003689c8645ca71a5320345951b073f736cc75c15c1eec4d028d5171ae892f60d02210087c6c18fbe62dd894ed0402ae93431269c05be7e3a942b9b0fcb263c29d342fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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