go.sig.ma

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 7a:6a:89:6c:e0:b1:c2:d2:46:6c:eb:26 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.sig.ma,OU=Domain Control Validated by OneClickSSL,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:6a:89:6c:e0:b1:c2:d2:46:6c:eb:26
Serial Number (int): 37885966307730698522722102054
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 0e:25:ba:e6:85:ef:02:3b:70:b8:c1:ea:2a:c1:91:eb:48:b7:3f:a9
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 89:5b:e6:1b:0d:c0:c2:e3:c4:73:2e:eb:a0:fe:8a:3f:09:1a:5b:8e
Fingerprint (sha256): 9b:6c:34:99:df:00:a1:c9:1d:0a:f5:32:21:e3:a1:e4:43:07:93:88:bb:69:78:c1:6d:b0:4f:7c:4e:90:2f:11

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate go.sig.ma

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.sig.ma

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.sig.ma
www.go.sig.ma

Other certificates including the domain name sig.ma

(limited to 100 certificates)
s2.shared.global.fastly.net
dev.sig.ma
dev.sig.ma
help.sig.ma
dev.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
st2.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
bigthings.info
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
blog.sig.ma
s2.shared.global.fastly.net
*.sig.ma
go.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
*.sig.ma
images.sig.ma
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
urna.net.br
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
blog.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
dev.sig.ma
s2.shared.global.fastly.net
help.sig.ma
try.sig.ma
images.sig.ma
s2.shared.global.fastly.net
dev.sig.ma
help.sig.ma
www.datanta.com.ar
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
try.sig.ma
go.sig.ma
s2.shared.global.fastly.net
images.sig.ma
dev.sig.ma
s2.shared.global.fastly.net
*.sig.ma
try.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net

Certificate

The complete raw certificate details for go.sig.ma in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8hNvNmj11gnCLzwaTA7
oY1BTIsVSMLZQFrNEtvQmETuLwS8BVJtwt3SLxgizza9hn1lYCtvRHLAKNw/h9E5
jIfF2Ip76qLYHRjnwt2u7lQjnzidZxjlawY/LrF/R1o3av7iqIncGK+AkbxQJgka
2F32VkZB2gJsI3pgGUM5Bu3D0iQ4LEp3VI2GRC71UHzA1BjqpsrAoKe5MIlvud9U
A6I2QT8iec6+DSXjqS7uYZCwyRodZ9GzJ08udpUgJ7PH18WPTVG6bHmBIqCQzngN
I7+BknjiOT7DajXT7oskGvjxUCAqSzZ9HDaObZg+p3RaQA7oWlAIVTmIC+LARvuW
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37885966307730698522722102054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-04 21:35:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 21:35:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated by OneClickSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.sig.ma'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19160757467374050541526232880185385572830611586052840226264325640580321171623121216003008381894410966141133203616441319882834173538815835122132610963293188814537159359556620523100870156471585490025727272780976395824146676957025173159032429697764627172258617041581255999373643703919355700949843241336090597144411536528720944938888283924068281300420822683584608538098166109567340364918324850548069457527203142419233652206675595971249566266231096491931274618869137369130675730947326181847952300607943572591630086081094902002123700592234934351327608175121607604241186903118339218192066322080656030189451670283555488634457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.sig.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.go.sig.ma'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e25bae685ef023b70b8c1ea2ac191eb48b73fa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001602374821700000403004730450221009a2174c18faa7eb483ef02e9b9a81e5a0c769c5a93c2dfb7fe6e79394bcd26930220665e6ca56df81d2620853564941639a63f893a461317d915a18d9835ed2031800075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001602374826e000004030046304402202380f94f13ccd9a6a2045d4c30bf79db99ea5906e0f3249e0c5303776ef26e1802202e28cf8926cf24ee0e3bf3b87e551da38c3f23677221ad07107d5ab2ec9213d5007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000160237485bf0000040300483046022100b7ba70455098e2632462ff4495cc4ef4dfe1d8d29c43a11cfa707bf67b7ecb50022100c10fe034295eb7e6ed1cb49182e2ce65afe92afe90c91712e4b6b0be4ebbcada007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000160237485020000040300483046022100844ea79fb5ce306183927ce627647e2b109bd9ec73f3abaa8a12189ea9648bde022100ad644d0260d79ee9702c9f01636cdbe1d05d70a25e664832720c3cfbf9eb77f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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