donald.kennisnet.org

- Stichting Kennisnet -

Issued by GlobalSign Organization Validation CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:25:9c:43:d7:02 was issued on by GlobalSign.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Stichting Kennisnet

Organization: Stichting Kennisnet
Organization unit: Stichting Kennisnet
State / Province: ZH
Locality: Zoetermeer
Country: NL

GlobalSign

Organization: GlobalSign
Organization unit: Organization Validation CA

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:25:9c:43:d7:02
Serial Number (int): 1208925819615890221815554
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: e5:24:ae:e0:f6:5b:a4:5c:83:25:fd:da:63:6b:f3:cf:4f:b1:2a:c6
AuthorityKeyId: 7d:6d:2a:ec:66:ab:a7:51:36:ab:02:69:f1:70:8f:c4:59:0b:9a:1f

Fingerprint (sha1): 78:d8:3d:41:39:b4:94:7e:d0:9e:45:b0:30:3a:cd:0f:59:31:a9:ce
Fingerprint (sha256): a4:74:26:2c:3a:84:ad:8f:a7:ef:9a:4e:64:af:f0:66:b8:35:b6:c7:63:27:48:60:03:8d:31:8f:2c:a4:ba:57

Issuing Certificate URL: http://secure.globalsign.net/cacert/orgv1.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.net/OrganizationVal1.crl

Check the revocation status for certificate donald.kennisnet.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for donald.kennisnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

donald.kennisnet.org
autodiscover.kennisnet.org
webmail.kennisnet.org
autodiscover.kennisnet.nl

Other certificates including the domain name kennisnet.org

(limited to 100 certificates)
webmail.kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
mysite.kennisnet.org
*.kennisnet.org
kennisnet.org
titaan.kennisnet.org
samenwerken.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
kennisnet.org
hotspot.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
fs.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
webmail.kennisnet.org
*.kennisnet.org
vpn.ka.kennisnet.org
support.kennisnet.org
kennisnet.org
kiwi.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
support.kennisnet.org
support.kennisnet.org
kennisnet.org
donald.kennisnet.org
kennisnet.org
*.kennisnet.org
support.kennisnet.org

Certificate

The complete raw certificate details for donald.kennisnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdGoLTk2DucrHYz659qw
eaJJSp0EhXsi3tdi0h8Qf8n4uLhLzqWmml6FtswMasYM5uX4HICzC98rzRKfaKy6
CpdRB79euDknCIrBeXzZA73tJFtuMv+lN9x0R59m0V0AVuJg7WZGLDzqRwr8AU9U
yUqdEInTeIwhXIq5s60VFdJBx6A7TMp6cLZs6xw5IH9AUJEMdq1Eh7hwjpUi+gCg
NxIHQlUOFK6JxEUuo1K0GZglXOx1VjpU8/b8KZXIxKVZSroSV0wxDSr/fwRNrynS
sZqZhy+G4cjOLzh1HCf/PSGeqc1jKIcCs3imzZl/8WbWp7WEJPUaE22scadkApc9
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615890221815554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validation CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-12-17 10:16:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-12-18 10:16:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zoetermeer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Kennisnet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Kennisnet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'donald.kennisnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20932706009778517694856658334603940864563159162959291242833782274660002210496269314582002880706034930773156798816171918402647610638998458227034353760825811501124072803961938788892447563342628986616463520102830728690716515458130152759725128519458642072461486577782994688261376575712629332161317075760101813044714567189226292340052351366215339663765567552038301473162289413642078926315054005111201117048364824361555895240587969347600515202048228163930206021577586849952649334009784779248473681375099292972373171661976681874254497062649886951183218849820712157405276678606625586835314519057913303014276205466674840157509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d6d2aec66aba75136ab0269f1708fc4590b9a1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/orgv1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/OrganizationVal1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e524aee0f65ba45c8325fdda636bf3cf4fb12ac6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donald.kennisnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kennisnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kennisnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kennisnet.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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