iwa.generali-guernsey.com

Issued by GlobalSign Domain Validation CA - G2

About this certificate


This digital certificate with serial number 11:21:3d:fe:89:ee:17:59:39:62:30:67:dc:e4:ca:55:f4:84 was issued on by GlobalSign nv-sa .

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

iwa.generali-guernsey.com

Organization unit: Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:3d:fe:89:ee:17:59:39:62:30:67:dc:e4:ca:55:f4:84
Serial Number (int): 1492220583497013754400646188073767375598724
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: ab:ad:05:c5:d0:b9:28:5b:e3:d5:7e:f5:42:79:84:f1:36:e5:de:44
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): ce:08:b6:ec:48:a6:63:2c:15:78:0a:3e:b2:8a:87:2b:3a:08:8a:04
Fingerprint (sha256): ae:6b:5f:b7:41:97:14:10:a5:aa:df:5c:79:67:5d:8a:51:d5:77:05:15:70:27:fd:10:12:c5:ed:32:e3:73:ba

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for the current certificate on iwa.generali-guernsey.com
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

iwa.generali-guernsey.com
webmail.generali-guernsey.com
autodiscover.generali-guernsey.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISESE9/onuF1k5YjBn3OTKVfSEMA0GCSqGSIb3DQEBBQUA MFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYD VQQDEyRHbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gRzIwHhcNMTMw OTA1MTQxMjA5WhcNMTQwODEwMDc0NjUxWjBHMSEwHwYDVQQLExhEb21haW4gQ29u dHJvbCBWYWxpZGF0ZWQxIjAgBgNVBAMTGWl3YS5nZW5lcmFsaS1ndWVybnNleS5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8uuCM0F7bhYAKcBP5 lqhggwJV6KIKYc85BLzAVP0bpGreRu+ym8djIwPUib3Bn1qhG/2qrL3jmctGsIxr 3IWLThpIOU2unLFxyPx57WaZNkcNZ0Z6ljcx+67M5lQNhmq9LuJyv7wl3d9lvegj O4I8q4RzZsw1k0Fex+C2jPFqnOLmWEusPc2KC6K59bA4tRrIdmPMVa5DwxIuTYs8 peAxbpkOYY6oIH9VbmOF9Dm9+CwRVChBYvv8oXRakODULNem4o6lXxtcuFxoXxM7 kuD/x8bDyD7QRtNYgY9/nXqOtYM5rdCg8rKv5VFHht23DeSBNsNRy5UDvGHoj+7L 4K+jAgMBAAGjggH+MIIB+jAOBgNVHQ8BAf8EBAMCBaAwSQYDVR0gBEIwQDA+BgZn gQwBAgEwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v cmVwb3NpdG9yeS8wZwYDVR0RBGAwXoIZaXdhLmdlbmVyYWxpLWd1ZXJuc2V5LmNv bYIdd2VibWFpbC5nZW5lcmFsaS1ndWVybnNleS5jb22CImF1dG9kaXNjb3Zlci5n ZW5lcmFsaS1ndWVybnNleS5jb20wCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5nbG9i YWxzaWduLmNvbS9ncy9nc2RvbWFpbnZhbGcyLmNybDCBiAYIKwYBBQUHAQEEfDB6 MEEGCCsGAQUFBzAChjVodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2Vy dC9nc2RvbWFpbnZhbGcyLmNydDA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AyLmds b2JhbHNpZ24uY29tL2dzZG9tYWludmFsZzIwHQYDVR0OBBYEFKutBcXQuShb49V+ 9UJ5hPE25d5EMB8GA1UdIwQYMBaAFJat+rBbuYNkKnbCHIpp2kLc/v0oMA0GCSqG SIb3DQEBBQUAA4IBAQA642dMSs7qa/iyeGjvkPZy8GlReVifLm/VjpIzVFnmuz8J HQqqsauJBmrgM6dyTxdKhYxkai/wQ52/kSoNRw9Pxov5sT1Sk5qAa2/4h8uCyvio 8x1b2YAaluHwslO62BUYiK09nNnXhrNj+KCSdBRq6/RprR0bfcAgjDRkx7kk8j0g 1ernRSuo5kYs3NapDCeHyb8+vf+gVCnzwqsm2Lh8fiiFDGll+bLydN32ryDE9pq3 8uk7oaFcmtZnkTGCSTA3+yZYdYboe+dwtxt8bPwHWXbN7ZfrO/XQlv94XxrQqrpd cRGNWcIR1xsYKUs72R1m2srSdRMP/T1B19SKgLvc -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLrgjNBe24WACnAT+Zao YIMCVeiiCmHPOQS8wFT9G6Rq3kbvspvHYyMD1Im9wZ9aoRv9qqy945nLRrCMa9yF i04aSDlNrpyxccj8ee1mmTZHDWdGepY3MfuuzOZUDYZqvS7icr+8Jd3fZb3oIzuC PKuEc2bMNZNBXsfgtozxapzi5lhLrD3NiguiufWwOLUayHZjzFWuQ8MSLk2LPKXg MW6ZDmGOqCB/VW5jhfQ5vfgsEVQoQWL7/KF0WpDg1CzXpuKOpV8bXLhcaF8TO5Lg /8fGw8g+0EbTWIGPf516jrWDOa3QoPKyr+VRR4bdtw3kgTbDUcuVA7xh6I/uy+Cv owIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492220583497013754400646188073767375598724 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-05 14:12:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-10 07:46:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iwa.generali-guernsey.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23824953890191312556900641625011129426656958489002749027481948276206579981897027648630771510306381892114113650007220484471483311628432358118775738803174628768430115604577145164346259167101959709166040766432425076012773067224786210902327028758676637571906466101532369464464656254813964209717712243206632169797796273265513244897385127840455534604080539154157383699820994742159325722933559467589543010970115643554883631108235240227365464134528534110625727186651319612763708631866459423005533225853261481655446550278384887616833348018220303660670280110246218462778100269244875550652893613115432184700523883748186598191011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwa.generali-guernsey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.generali-guernsey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.generali-guernsey.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalg2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) abad05c5d0b9285be3d57ef5427984f136e5de44 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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