www.vinology.com
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 11:21:e1:b6:b4:11:9b:74:bc:0e:e8:b3:de:6d:1c:c5:f9:04 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.vinology.com,OU=Domain Control Validated by OneClickSSL,C=US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 11:21:e1:b6:b4:11:9b:74:bc:0e:e8:b3:de:6d:1c:c5:f9:04Serial Number (int): 1492438203897623740416969877746353768364292
Serial Number lenght: 141 bits, 18 octets
SubjectKeyId: 77:75:6f:85:72:93:fe:94:6f:7c:5c:34:1a:85:b8:2a:76:34:e4:3f
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): 5b:1d:2a:f4:4e:c7:d2:d6:c9:e2:ae:fd:d1:20:ee:f7:f2:d6:8f:5e
Fingerprint (sha256): 97:48:d1:43:37:1f:e4:03:f5:28:6f:2f:cd:a7:f4:09:a0:e0:be:c0:c1:a6:c6:87:1c:e1:38:77:44:2b:56:4d
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate www.vinology.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.vinology.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.vinology.com
vinology.com
vinology.com
Other certificates including the domain name vinology.com
(limited to 100 certificates)
vinology.com
vinology.com
sni.cloudflaressl.com
vinology.com
vinology.com
vinology.com
sni.cloudflaressl.com
www.vinology.com
vinology.com
vinology.com
www.vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
sni.cloudflaressl.com
vinology.com
vinology.com
vinology.com
www.vinology.com
www.vinologycom.lightningbasehosted.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
www.vinology.com
vinology.com
vinology.com
vinology.com
*.vinology.com
vinology.com
www.vinology.com
vinology.com
vinology.com
vinology.com
sni.cloudflaressl.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
www.vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
www.vinology.com
sni.cloudflaressl.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
sni.cloudflaressl.com
vinology.com
vinology.com
vinology.com
sni.cloudflaressl.com
www.vinology.com
vinology.com
vinology.com
www.vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
sni.cloudflaressl.com
vinology.com
vinology.com
vinology.com
www.vinology.com
www.vinologycom.lightningbasehosted.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
www.vinology.com
vinology.com
vinology.com
vinology.com
*.vinology.com
vinology.com
www.vinology.com
vinology.com
vinology.com
vinology.com
sni.cloudflaressl.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
www.vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
www.vinology.com
sni.cloudflaressl.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
vinology.com
Certificate
The complete raw certificate details for www.vinology.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgISESHhtrQRm3S8Duiz3m0cxfkEMA0GCSqGSIb3DQEBCwUA MEwxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYD VQQDExlBbHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE1MDcwNjAxNDcwM1oX DTE2MDcwMjIzMDAwOFowWjELMAkGA1UEBhMCVVMxMDAuBgNVBAsTJ0RvbWFpbiBD b250cm9sIFZhbGlkYXRlZCBieSBPbmVDbGlja1NTTDEZMBcGA1UEAxMQd3d3LnZp bm9sb2d5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJdwerm 4JWTrhLDLPXqnGIrf1U6stqI2SVvB1uUI2fbGWZR44MyxaM/fMmqg09yO6qSLKb/ 8D1wv+SqAUiO3TJHs/XJnR4dKXMI8gUkFKfGBFEbnS0R5kuroODFNL4NcsN+6P3M iU+LfNAiXPJ2pYLH4VVCbjCF6NUqbYx/CDt/i3ZoT0+KD+LIVjqb5u16/Vi1Pt1L XGkzOFJAEZDiq9qZfTgzAeQtY23U8lQDqwMxLJ8hvrLVd0ZqfgjtLoesOSbq3I/1 nweKN0/dTPcGEx2xsqhhFZ2w3XlAKHPB2ExtzkOdon2Y07CYInyXbxfmvFbviM+H BEQwryJFA1Tw7i0CAwEAAaOCAcAwggG8MA4GA1UdDwEB/wQEAwIFoDBJBgNVHSAE QjBAMD4GBmeBDAECATA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxz aWduLmNvbS9yZXBvc2l0b3J5LzApBgNVHREEIjAgghB3d3cudmlub2xvZ3kuY29t ggx2aW5vbG9neS5jb20wCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NybDIuYWxwaGFzc2wu Y29tL2dzL2dzYWxwaGFzaGEyZzIuY3JsMIGJBggrBgEFBQcBAQR9MHswQgYIKwYB BQUHMAKGNmh0dHA6Ly9zZWN1cmUyLmFscGhhc3NsLmNvbS9jYWNlcnQvZ3NhbHBo YXNoYTJnMnIxLmNydDA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AyLmdsb2JhbHNp Z24uY29tL2dzYWxwaGFzaGEyZzIwHQYDVR0OBBYEFHd1b4Vyk/6Ub3xcNBqFuCp2 NOQ/MB8GA1UdIwQYMBaAFPXN1TwIUPlqTzq3l9pWg+Zp0mj3MA0GCSqGSIb3DQEB CwUAA4IBAQDAFx0wfP3KMgrBTqONx6NHuYJRZNCO/K5EqaVcj9KdBv4nbdZnjhX1 D/jnsfsB4AFEgtesGGohQguFxsI+NetNjJmmd1JYxlE92Gu2DUrhRIwk3Am/9Vh6 M2odLHGIk8TYk95Y7lJW65uTzRL4JKf9uDlgdJ3yOM07S41VvpSaLKC5zTFGUzUK JJrSV1LaI2HWOPIzOrznzhmTRLo2XvL6b7lFQVUy3X+jwD1INzzJBUdVU3am4jp6 irTzGVamVQ3re7mlKvkH0guOkZO4Hba4HZfGXNiVt++2mzPtJDEdiNrmPTInFNR6 LgKLaEuPeSB4V4aeZIQptgEOBbhsqby8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl3B6ubglZOuEsMs9eqc Yit/VTqy2ojZJW8HW5QjZ9sZZlHjgzLFoz98yaqDT3I7qpIspv/wPXC/5KoBSI7d Mkez9cmdHh0pcwjyBSQUp8YEURudLRHmS6ug4MU0vg1yw37o/cyJT4t80CJc8nal gsfhVUJuMIXo1SptjH8IO3+LdmhPT4oP4shWOpvm7Xr9WLU+3UtcaTM4UkARkOKr 2pl9ODMB5C1jbdTyVAOrAzEsnyG+stV3Rmp+CO0uh6w5Jurcj/WfB4o3T91M9wYT HbGyqGEVnbDdeUAoc8HYTG3OQ52ifZjTsJgifJdvF+a8Vu+Iz4cERDCvIkUDVPDu LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492438203897623740416969877746353768364292 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-06 01:47:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-02 23:00:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated by OneClickSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vinology.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22516651825705213771567984078253350164472536143931276454638821209558653409787738546114063735792118777341098618218842724082268773052264610148125070216762453603792194658799155576554896993649052716136267805678944126627385546610251108474677998479448722645939004272551143934324798154156204268735025554269922626450188899062959454366286462725253439231342474293975064365113043020408864679709397255564124225924784574656224184566533576721897659927813605250264384015882273933939533035237009120918482275824488471147276251140694662228488208172673397458822090847229222689240422197605176770482293187057239876083208750511374447210029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinology.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinology.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 77756f857293fe946f7c5c341a85b82a7634e43f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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