www.bms-chem.be
- www.bms-chem.be -
Issued by GlobalSign Domain Validation CA
About this certificate
This digital certificate with serial number 01:00:00:00:00:01:2e:52:46:e0:d9 was issued on by GlobalSign nv-sa.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- 6 DNS name(s) are bare public suffixes: CLUSRV01, CLUSRV02, BMSEXC01, FRONTSRV01, FRONTSRV02, BMSCASHUB The domain SHOULD NOT have a bare public suffix (awslabs certlint)
www.bms-chem.be
Organization unit: Domain Control Validated
GlobalSign nv-sa
Organization unit: Domain Validation CA
This certificate has expire since
Certificate Details
Serial Number (hex): 01:00:00:00:00:01:2e:52:46:e0:d9Serial Number (int): 1208925819615927635206361
Serial Number lenght: 81 bits, 11 octets
SubjectKeyId: 1f:55:da:e5:8d:d1:5b:b4:71:06:43:93:49:fe:30:22:1c:18:a9:69
AuthorityKeyId: 36:12:4e:9e:71:c4:26:41:f1:fa:f1:29:4c:bf:17:a4:53:28:b6:eb
Fingerprint (sha1): cf:63:af:d6:39:ea:9b:51:d6:82:68:28:e0:c8:69:17:9c:30:79:13
Fingerprint (sha256): a2:93:65:28:2c:6a:70:20:f8:c3:68:29:85:2d:05:fd:c9:5f:07:f6:44:df:bf:af:e7:b0:07:21:24:03:8f:e1
Issuing Certificate URL: http://secure.globalsign.net/cacert/dvhe1.crt
Revocation information
CRL Distribution Point: http://crl.globalsign.net/DomainVal1.crlCheck the revocation status for certificate www.bms-chem.be
10
0
0
Advanced Certificate Properties
Tehnical certificate details for www.bms-chem.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
CLUSRV01
CLUSRV02
BMSEXC01
FRONTSRV01
FRONTSRV02
BMSCASHUB
mail.bms-chem.be
autodiscover.bms-chem.be
bms-chem.be
Other certificates including the domain name bms-chem.be
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.bms-chem.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgILAQAAAAABLlJG4NkwDQYJKoZIhvcNAQEFBQAwcTELMAkG A1UEBhMCQkUxHTAbBgNVBAsTFERvbWFpbiBWYWxpZGF0aW9uIENBMRkwFwYDVQQK ExBHbG9iYWxTaWduIG52LXNhMSgwJgYDVQQDEx9HbG9iYWxTaWduIERvbWFpbiBW YWxpZGF0aW9uIENBMB4XDTExMDIyMzEwMzcxM1oXDTEzMDQwOTEzMjYwNFowZDEL MAkGA1UEBhMCQkUxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEY MBYGA1UEChMPd3d3LmJtcy1jaGVtLmJlMRgwFgYDVQQDEw93d3cuYm1zLWNoZW0u YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHn+JAYP27vVioUU2m yxlaL1GXmF2g2chO+gtjJv/5oMFS+kw803I8T9Cs05wYUBdg8k5EbVcvqF/AdKBN A17hprwhhOJROO+5y2JySYdJ+Z/6VO0LOAWm6w4qF++3v9Pvh9umupwl2TM/lVxx WC5UbA1k7GE+QibHezBNdFrat2q5K371+4Irbi2C7CUbiEbpXenDoAxn4cD+ZY/5 Nla9ZLT3zAzwGCRNAkRGYPxMZ8z8/nJ5JUdatzHV+ZUHXOILAHLS4Eqg9K7lcVc0 HvaapZXv9m1rfVGKEZYJ6Gz3f0uJZ3PrExLyNEIkN1XaFzUWu8F0pKHv3Ot93CH6 6o3HAgMBAAGjggIJMIICBTAfBgNVHSMEGDAWgBQ2Ek6eccQmQfH68SlMvxekUyi2 6zBJBggrBgEFBQcBAQQ9MDswOQYIKwYBBQUHMAKGLWh0dHA6Ly9zZWN1cmUuZ2xv YmFsc2lnbi5uZXQvY2FjZXJ0L2R2aGUxLmNydDA5BgNVHR8EMjAwMC6gLKAqhiho dHRwOi8vY3JsLmdsb2JhbHNpZ24ubmV0L0RvbWFpblZhbDEuY3JsMB0GA1UdDgQW BBQfVdrljdFbtHEGQ5NJ/jAiHBipaTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIE 8DApBgNVHSUEIjAgBggrBgEFBQcDAQYIKwYBBQUHAwIGCisGAQQBgjcKAwMwSwYD VR0gBEQwQjBABgkrBgEEAaAyAQowMzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5n bG9iYWxzaWduLm5ldC9yZXBvc2l0b3J5LzARBglghkgBhvhCAQEEBAMCBsAwgZYG A1UdEQSBjjCBi4IPd3d3LmJtcy1jaGVtLmJlgghDTFVTUlYwMYIIQ0xVU1JWMDKC CEJNU0VYQzAxggpGUk9OVFNSVjAxggpGUk9OVFNSVjAygglCTVNDQVNIVUKCEG1h aWwuYm1zLWNoZW0uYmWCGGF1dG9kaXNjb3Zlci5ibXMtY2hlbS5iZYILYm1zLWNo ZW0uYmUwDQYJKoZIhvcNAQEFBQADggEBADuVxXBqGjfXQ8lEBA1MvC73yzBTytOc O8z+EKReSrki3T2c9y8sJwwJ96lhQg3vdc7VQkpkKpu9tjRyaWB6Nv3w91vbbpu3 Ezh2JVC+NmXvrrZmVkkEhHSOT08cjaFplrExcgeUkpaP6CYeb3t648by6Zi/wath Hh7dEBY7EskreaQonU9vlotA4gx5pbYqDLJ1QJ2DJzJ/1Ev9DMFNfnXFXCadOpMV rjF4z4Y44mYKLrRPuQJVqI5XIyQGRS7GBCFn7DyFgszz8CEUON+Cm+LRyOpPfyWn A9upQeTzkPHfsHwyvmVXyJZYqbkNaHJPqhcDctAQwBmv/h26ov9PFX0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5/iQGD9u71YqFFNpssZ Wi9Rl5hdoNnITvoLYyb/+aDBUvpMPNNyPE/QrNOcGFAXYPJORG1XL6hfwHSgTQNe 4aa8IYTiUTjvuctickmHSfmf+lTtCzgFpusOKhfvt7/T74fbprqcJdkzP5VccVgu VGwNZOxhPkImx3swTXRa2rdquSt+9fuCK24tguwlG4hG6V3pw6AMZ+HA/mWP+TZW vWS098wM8BgkTQJERmD8TGfM/P5yeSVHWrcx1fmVB1ziCwBy0uBKoPSu5XFXNB72 mqWV7/Zta31RihGWCehs939LiWdz6xMS8jRCJDdV2hc1FrvBdKSh79zrfdwh+uqN xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615927635206361 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validation CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-02-23 10:37:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-09 13:26:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bms-chem.be' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bms-chem.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17121012808123382779643865693631143721876164884032900850866986915563634699123011835772959215163437345901730408003201527591144952721129531617073293895152284768820034982203149751202691627096568626386252116114645857956867863039491119883777805303286316005376115706739524880281445306830764687680273649976360247994015731962846868805555833354739653708576320039206948816741165565010827830509424869062237541237780057640139681958569539629634823407816327927832484759614041107759025672626461749013652261079688549702961696455504541066134006633584774837461818344401617490585873386713840092198136611982947138520422219721702132846023 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 36124e9e71c42641f1faf1294cbf17a45328b6eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/dvhe1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/DomainVal1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1f55dae58dd15bb47106439349fe30221c18a969 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits) 06c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bms-chem.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CLUSRV01' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CLUSRV02' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BMSEXC01' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'FRONTSRV01' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'FRONTSRV02' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BMSCASHUB' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bms-chem.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bms-chem.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms-chem.be' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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