www.goldentulip.com

Issued by GlobalSign Domain Validation CA - G2

About this certificate


This digital certificate with serial number 11:21:53:6c:4c:9e:fb:d7:f6:5e:e5:42:ba:5c:70:73:0f:0e was issued on by GlobalSign nv-sa .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.goldentulip.com

Organization unit: Domain Control Validated
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:53:6c:4c:9e:fb:d7:f6:5e:e5:42:ba:5c:70:73:0f:0e
Serial Number (int): 1492249067194085153440482311885354710535950
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 3c:6a:18:12:8b:1c:d2:75:3f:72:82:f3:63:c6:47:90:22:49:23:aa
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): ab:69:88:bb:c7:59:a2:2a:c1:bb:82:ac:d2:1a:d3:fe:26:f2:e9:f5
Fingerprint (sha256): 2f:09:d3:73:a7:d9:b7:f1:b8:80:b8:b5:ca:d6:65:47:70:19:82:53:9a:9d:7b:68:ed:e7:e1:60:cf:db:97:44

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for the current certificate on www.goldentulip.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.goldentulip.com
goldentulip.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISESFTbEye+9f2XuVCulxwcw8OMA0GCSqGSIb3DQEBBQUA MFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYD VQQDEyRHbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gRzIwHhcNMTIw NDIwMTM1MjEzWhcNMTMwNDIxMTM1MjEzWjBOMQswCQYDVQQGEwJVUzEhMB8GA1UE CxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRwwGgYDVQQDExN3d3cuZ29sZGVu dHVsaXAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQRmA9LY dvoNBdgglghXk60ck6lKK1oQQg2KMeWJOx9zWv9VFvBENwGkTAkDzogoPD0Z0BCy D7vKSz9fhRkTCGoFKmga2pZjDy8PJQEUReWdgMbMi6U7sZ7XXEz7HBP5jaHtq0oA L4nn2lV4OEvTtSUZ991hzeZNC9c3h42/XhSyyWkbTbvgbgkbhyrLol+Rxhp7tYZc VafLqgH9IyBxzw+IdIicXZiaALvkjUPzetJpEZlWNZ3lH+HQA2rEvBTkydCYS5FZ 92Iak6182kSOuDg9SqovLa7YijRpQ2C473wdQNZCHPAsHd+Un3FD6FwzefVlnaHL 56kSEnt2JxQppQIDAQABo4IByTCCAcUwDgYDVR0PAQH/BAQDAgWgMEwGA1UdIARF MEMwQQYJKwYBBAGgMgEKMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2Jh bHNpZ24uY29tL3JlcG9zaXRvcnkvMC8GA1UdEQQoMCaCE3d3dy5nb2xkZW50dWxp cC5jb22CD2dvbGRlbnR1bGlwLmNvbTAJBgNVHRMEAjAAMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmds b2JhbHNpZ24uY29tL2dzL2dzZG9tYWludmFsZzIuY3JsMIGIBggrBgEFBQcBAQR8 MHowQQYIKwYBBQUHMAKGNWh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2Fj ZXJ0L2dzZG9tYWludmFsZzIuY3J0MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcDIu Z2xvYmFsc2lnbi5jb20vZ3Nkb21haW52YWxnMjAdBgNVHQ4EFgQUPGoYEosc0nU/ coLzY8ZHkCJJI6owHwYDVR0jBBgwFoAUlq36sFu5g2QqdsIcimnaQtz+/SgwDQYJ KoZIhvcNAQEFBQADggEBAEhyfnE80XKD0PL5rUFtIgIe7+z824vLwF1EnSWuEICe 9dHjHw3slNAKPhSgqTsIfkxHq02N4CI1ESqjcd67Bny4ZpI3wvuEPB23+eBAaW+y OzDTHo+mvHoHYak7CZkFVVa05vE680gUCml5wLLmV2gQFGKLFMNTbzf/W8cvS7Kc x2wSEFYHV7MpG5+QgTkYaAcgLfAJemDqy5LU/xepGbb8KvTfnZ5Z+xumJeIIgyz2 9Hn7CKnFnZqE2C1Z/N0jcumKToeUbOzbXESRjuoDdm7sNAahF/aQFuC+ShrnHy3i xbX3N/qJyZOCpvpRLkRN3tsoRvZ5HXN8Am6RsHUVsHA= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQRmA9LYdvoNBdgglghX k60ck6lKK1oQQg2KMeWJOx9zWv9VFvBENwGkTAkDzogoPD0Z0BCyD7vKSz9fhRkT CGoFKmga2pZjDy8PJQEUReWdgMbMi6U7sZ7XXEz7HBP5jaHtq0oAL4nn2lV4OEvT tSUZ991hzeZNC9c3h42/XhSyyWkbTbvgbgkbhyrLol+Rxhp7tYZcVafLqgH9IyBx zw+IdIicXZiaALvkjUPzetJpEZlWNZ3lH+HQA2rEvBTkydCYS5FZ92Iak6182kSO uDg9SqovLa7YijRpQ2C473wdQNZCHPAsHd+Un3FD6FwzefVlnaHL56kSEnt2JxQp pQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492249067194085153440482311885354710535950 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-20 13:52:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-21 13:52:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.goldentulip.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19316629638946478079960055844594871901282901187956173262025334293515533695457740491550919529394446809459429040225040602758094382868746611694870546316925693630647256841142693086331036178079846004193106424748880270284317564360325976751235059657147066422292665931808120151107744601936552879497693527893038685431229044868024599291284218835055800356181409891498917490034078916717555495372139043331615429757339015601481500188117382603295200429252892049712209076823550651138201435233212991017966599646023887973645006324399987760948012421185163464979788427693210556932766399204586798814110398764838892865347886343250915895717 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldentulip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldentulip.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalg2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3c6a18128b1cd2753f7282f363c64790224923aa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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