citrix.ikano.dk

Issued by GlobalSign Domain Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:18:bd:b3:1c:5f:83:50:26:5c:3a:0c:40:bd:1b:c4:91 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citrix.ikano.dk,OU=Domain Control Validated,C=DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:18:bd:b3:1c:5f:83:50:26:5c:3a:0c:40:bd:1b:c4:91
Serial Number (int): 1492171065397119530778029882400729418417297
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 2e:b6:46:a2:0e:2c:17:e8:1a:58:2d:b4:e1:18:1b:2a:12:d4:ed:d4
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): ca:ce:91:c8:93:80:63:93:46:72:20:01:ad:7a:32:20:8f:1d:a1:6c
Fingerprint (sha256): a0:be:68:c6:24:94:85:50:44:12:fc:0e:b7:8a:b9:6b:33:96:a2:17:30:81:ae:65:3a:8f:f1:e6:22:50:0a:d1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for certificate citrix.ikano.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.ikano.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.ikano.dk

Other certificates including the domain name ikano.dk

(limited to 100 certificates)
selfservice.ikano.dk
mail.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
irw.ikano.dk
www.ikano.dk
selfservice.ikano.dk
citrix.ikano.dk
www.ikano.dk
mail.ikano.nu
citrix.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
sip.ikano.nu
test.ikano.dk
www.ikano.dk
www.pengeautomaten.dk
access.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
citrix.ikano.dk
sip.ikano.nu
irw.ikano.dk
access.ikano.nu
selfservice.ikano.dk
selfservicetest.ikano.dk
sts.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservicetest.ikano.dk
www.ikano.dk
citrix.ikano.dk
www.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
mail.ikano.nu
mail.ikano.nu
www.ikano.dk
sip.ikano.nu
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
sip.ikano.nu
www.ikano.dk
capgemini.ikano.dk
test.ikano.dk

Certificate

The complete raw certificate details for citrix.ikano.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+ar/rYAPyW4ejSMCGPp
XViBtF0QEnwPUu0YsKYblnUpe6saNvykBqVF4/zWk07jZWyfYvF/PdaMuSizeztM
c37YW26WEkk2Ujj16GjAceLgx7oYVQLlH/b81POpytN3rbsyxVNic1ley8jGBrH0
23TA7vher8phknWODwvfLu2I79WjDPMr1m95ZoG94y16cPJQ6zkKawERlzqvIdjp
p18ryzqqcdIY4omdbII6Ec69a12gC/dc8S+ugC300DxYPrBW7FRACnrDBoJ+i9RI
kTRhgCRlUBnWmYI5amr5QUNbtIe2qPzlZ+ThLg50VB7f17mOxEkiupZ6hHvmJA/I
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492171065397119530778029882400729418417297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-09 07:39:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-09 07:39:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'citrix.ikano.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28264890538760374823661512800489985715882892464351061861437319705241798843269719047713873804224540976451628078669274958105803366462088164834680364494399026206894880525787081862277878834009900245625352603847214515962472413265179623245216260979604549790289805230460003583683438735715261826132842439182068043205536439316180655729015529026287909356782531387069944489769794243824175251676764394629913499609020319172082159213167473371030297268095230971210140378571271806702225968155141524937709167850005352216720075920815387706101937002201248098947009859915737118289942977690284730618872795470763700142533409925619927468107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.ikano.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2eb646a20e2c17e81a582db4e1181b2a12d4edd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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