vpn.nordenta.dk

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 56:1b:b3:3c:7c:fb:17:5d:99:f2:23:24 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vpn.nordenta.dk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 56:1b:b3:3c:7c:fb:17:5d:99:f2:23:24
Serial Number (int): 26649198261176166557754204964
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a1:b8:a2:ad:90:91:5a:bd:0b:9b:bc:7d:36:de:08:ca:72:37:54:43
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): a0:4c:1c:12:01:99:be:e7:9c:d7:e5:ee:62:7a:fc:f2:09:9c:52:12
Fingerprint (sha256): 94:ee:00:fe:eb:de:cf:83:a6:4f:3b:1a:4c:d7:89:cf:f0:66:28:f6:05:cd:bf:f1:90:58:09:cf:85:38:ea:37

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate vpn.nordenta.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.nordenta.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.nordenta.dk

Other certificates including the domain name nordenta.dk

(limited to 100 certificates)
www.nordenta.dk
vpn.nordenta.dk
www.licscadenta.no
www.nordenta.dk
*.nordenta.dk
*.nordenta.dk
vpn.nordenta.dk
*.nordenta.dk
www.nordenta.dk
www.licscadenta.no
vpn.nordenta.dk
vpn.nordenta.dk
www.nordenta.dk
*.nordenta.dk
vpn.nordenta.dk
www.licscadenta.no
www.licscadenta.no
*.nordenta.dk
*.nordenta.dk
*.nordenta.dk
www.nordenta.dk
edge.nordenta.dk
www.nordenta.dk
www.licscadenta.no
edge.nordenta.dk
citrix.nordenta.dk
www.nordenta.dk
edge.nordenta.dk
www.licscadenta.no
www.licscadenta.no

Certificate

The complete raw certificate details for vpn.nordenta.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26649198261176166557754204964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 12:03:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-25 12:03:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.nordenta.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754875848619756115064303439972030511660609827910101969882575391345228731058604617266876870336391310750553796669234179575474566926146478871850626848666309944126245475546256210657790811649438354354539202193250460916367336632559717162094460201562491522047027245397550537934504028735734653661289275193489964430046322797311679708124019571212160123833662970092312306273099479460335294814057977340995579684541797627717314710447989566558897607447254486686950200403890425233697590592971019825372995891386602749622768082559095028740224226771894558655088998969325864390717485430501662503789004662410131821255180715084427417773213184363713487429615757770186706756455733316490394878415515168868267625028327107734237881892376444860149950443178845359152220731576358424031963140842462308259400371453106943510820254597000082320479773456541978766364545985273775999298238740524109948644872770151826290534933158901789687061672596649137439799128821117525514575016033142021097359609933556268037460934947337249075153825441803931641035016936881167561488596849544925459067281722720532827952334223415966088856598938154601792118970603078839325828445671962447722869283202957907083792266712436357514012087605506970443787900462946814922598304638683727815704758707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.nordenta.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1b8a2ad90915abd0b9bbc7d36de08ca72375443
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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