mail.riemst.be

Issued by GlobalSign Domain Validation CA - G2

About this certificate


This digital certificate with serial number 11:21:8b:47:44:ef:2b:1e:70:bb:6b:bc:57:ca:7f:c3:1d:5b was issued on by GlobalSign nv-sa .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

mail.riemst.be

Organization unit: Domain Control Validated
Country: BE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 11:21:8b:47:44:ef:2b:1e:70:bb:6b:bc:57:ca:7f:c3:1d:5b
Serial Number (int): 1492323311690958950110774930624591316589915
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 28:45:8f:a6:bc:7e:18:26:3a:3b:fd:7d:9e:87:06:27:c8:6b:60:80
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): 83:e7:fa:24:5e:82:b5:78:22:a6:72:88:a2:03:34:d1:67:8f:d3:9e
Fingerprint (sha256): f7:da:eb:67:2e:d9:a0:d3:a9:af:ca:b5:ec:44:9a:18:cc:b9:b4:80:6f:87:67:2f:61:af:41:2b:83:cb:33:bb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for the current certificate on mail.riemst.be
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.riemst.be
autodiscover.riemst.be

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgISESGLR0TvKx5wu2u8V8p/wx1bMA0GCSqGSIb3DQEBBQUA MFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYD VQQDEyRHbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gRzIwHhcNMTUw NTEyMTEzMDI4WhcNMTYxMjMxMjM1OTU5WjBJMQswCQYDVQQGEwJCRTEhMB8GA1UE CxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRcwFQYDVQQDDA5tYWlsLnJpZW1z dC5iZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKtu7RhXfGMOurkh Wj5GTA/TEFrKX0hKInVx7EdKf68bGT7ZwAshGdifqKFIzAhQ+xkvF+WJ8qOXZM/9 6Q11ruRXjEhAI87Kcp2jy9kqeEudlzWeS9/WjAFY4vbR8uxyC/0ZXUy+zG8K23fI mL7rAZwZAChSxAu6biJANqucQtUPYsxkA1CWZd3juo6bKESRtv9oK2++ouerXXvN SaciZNH5klI2aEYFUnkpdmsqAW4NsAh929GIHELf6E4eOhOcHjff/+x2T/sXEOsF YSd9FzvU6O4lFx42lYBmQjEEuvl4sDwHxTrUaI3uHtd6Z6toRPx9/dLp4RELAnDm uCc13V8CAwEAAaOCAcgwggHEMA4GA1UdDwEB/wQEAwIFoDBJBgNVHSAEQjBAMD4G BmeBDAECATA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv bS9yZXBvc2l0b3J5LzAxBgNVHREEKjAogg5tYWlsLnJpZW1zdC5iZYIWYXV0b2Rp c2NvdmVyLnJpZW1zdC5iZTAJBgNVHRMEAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmdsb2JhbHNp Z24uY29tL2dzL2dzZG9tYWludmFsZzIuY3JsMIGIBggrBgEFBQcBAQR8MHowQQYI KwYBBQUHMAKGNWh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dz ZG9tYWludmFsZzIuY3J0MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcDIuZ2xvYmFs c2lnbi5jb20vZ3Nkb21haW52YWxnMjAdBgNVHQ4EFgQUKEWPprx+GCY6O/19nocG J8hrYIAwHwYDVR0jBBgwFoAUlq36sFu5g2QqdsIcimnaQtz+/SgwDQYJKoZIhvcN AQEFBQADggEBAE2mg8FmzaAjc76Q/6vOHwl/R5W7lTyjDiLpmhrZNywEaQKIdV3I 9YFCrRr5vTLZGrohWxZluiDjusgHXvrEgCYRVXOFpB+cQY8B/FfcDYJ5qLI2nKss 5Kg1DEjiGRbbcl+KajOrH8gUDBZpNwekBXgWbZj+8KNDVqqz7FlUzJ7w754elwPr xkNec+3Z0DZ6kkLjAb4VDip1ODgOwm/Z6GqsCfz4WaP+Rt/sD+bk/NjxZrfLA5z8 4ne1CO3HoK+JDT9SS4uHE+QmOMYNojS2e/ZOFGCd1+KeGk5va7WgYwd/mbxw83aQ kl/A/D6bDQdnrh16z+kN/2ZkMOGT5iJWWks= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq27tGFd8Yw66uSFaPkZM D9MQWspfSEoidXHsR0p/rxsZPtnACyEZ2J+ooUjMCFD7GS8X5Ynyo5dkz/3pDXWu 5FeMSEAjzspynaPL2Sp4S52XNZ5L39aMAVji9tHy7HIL/RldTL7Mbwrbd8iYvusB nBkAKFLEC7puIkA2q5xC1Q9izGQDUJZl3eO6jpsoRJG2/2grb76i56tde81JpyJk 0fmSUjZoRgVSeSl2ayoBbg2wCH3b0YgcQt/oTh46E5weN9//7HZP+xcQ6wVhJ30X O9To7iUXHjaVgGZCMQS6+XiwPAfFOtRoje4e13pnq2hE/H390unhEQsCcOa4JzXd XwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492323311690958950110774930624591316589915 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-12 11:30:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.riemst.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21641449873766968501080538205158264636788987943846817727606121147871851828038740001968594191767421049383611537264230028975705304428038125882232164003923609420133805339399682589698898115378922841815612615870126003627171298821630902125554315588811417106303894322358120631247281045171832977337864191048699573317564435139049332429710417088163446544417611933331264106871497035165660326261003478764503336936363830224067012378807288073852465731441685873142041811077103648587110324285708136407676633003821991467447470076709445249615885031136430021917768446286557545566343064481791400252250710030818985551974042228469926321503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.riemst.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.riemst.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalg2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28458fa6bc7e18263a3bfd7d9e870627c86b6080 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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