onna.be

Issued by Gandi Standard SSL CA 2

About this certificate


This digital certificate with serial number 1e:52:0a:01:4c:8e:2f:f0:6e:b1:97:26:81:12:da:cf was issued on by Gandi .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

onna.be

Organization unit: Domain Control Validated
Organization unit: Gandi Standard SSL

Gandi

Organization: Gandi

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:52:0a:01:4c:8e:2f:f0:6e:b1:97:26:81:12:da:cf
Serial Number (int): 40302811142964285682849387309652171471
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 9c:fa:77:3e:e7:43:cd:77:4c:48:49:77:13:fe:68:96:6f:05:31:77
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 84:da:3e:49:85:75:6c:0d:5c:37:42:d1:9b:8e:c8:5a:9a:68:a9:8b
Fingerprint (sha256): de:8d:6d:5c:5c:f1:f2:6d:a6:bc:82:f3:e8:0d:da:9e:29:79:ea:9e:4d:c6:85:52:f7:95:86:df:60:c1:7e:1c

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for the current certificate on onna.be
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

onna.be
www.onna.be

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIQHlIKAUyOL/BusZcmgRLazzANBgkqhkiG9w0BAQsFADBf MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw HhcNMTUwODEzMDAwMDAwWhcNMTYwODEzMjM1OTU5WjBSMSEwHwYDVQQLExhEb21h aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT TDEQMA4GA1UEAxMHb25uYS5iZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAK3KmcKcUpClwndjGUY46pDLiZn2WHZEvY9go89vv7CcQBzyZoSjQeCAdEvk LIhfEpl3prIfKOMwywC2jegjumFhMWl0DmVg1aVVfrVzmaK7iQYL3TXJ2kyQQMVH qGKq3M+d0zvyWJ58+A0qjdWyd8RFDO2+Na3ZKYDjs9+rAdGzry9fdJ8F4DcrJtKk lApCqkGu+pSk4LY1ZKO68pXjQ+JZ+lDnJ9xzlD6qcNX7qgdK+jRSsr7o6lF0w2mk sp4s4A9xPYmYRMHw7ZvfGRqw+RQmGEsm1vMj9xIcmKKz7u6AA1vney5XDxPCazjJ 5dULN1RFjasH/EhX5IHpKcPlOifZgoBJsMGxHohm1j0y9foi0PhacFozB8fnqQGE d9/rbTM2ZqcBj1LT/AegyEYvgEhK2MLaZ/tq5dC4h78srIEnAsKjskq1+wWp+8Ua LT6Wtg9q5d40hmw3m+Iimy0VqmwOC8CSL5Ck6i4Cdzk5tcq1UgbW79y7JUit2xQo 9K6kJv1+uNq9syMwj7cR6TXyyFmOGKZ0TCZK6R5oGLJRqd/DiJJH1rCddbXUOeRy sCdbKyxdvMNN7w1gmcXmi88lNmuaseHHTKqJtnvWXlVsaOWs+knNeQrt8XcQAwbf smvfyiUlESikLpqjtPDbFgqPcFQXcu87LU/uMY46a4eMnGiBAgMBAAGjggGnMIIB ozAfBgNVHSMEGDAWgBSzkKfYya9OzWE8n3ytXX9B/Wkw6jAdBgNVHQ4EFgQUnPp3 PudDzXdMSEl3E/5olm8FMXcwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYLKwYB BAGyMQECAhowJzAlBggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0LmNv bTAIBgZngQwBAgEwQQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC51c2VydHJ1 c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8 BggrBgEFBQcwAoYwaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRh cmRTU0xDQTIuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu Y29tMB8GA1UdEQQYMBaCB29ubmEuYmWCC3d3dy5vbm5hLmJlMA0GCSqGSIb3DQEB CwUAA4IBAQAU3tjMniUVU4hg7eJJJJqe+MuXy4emLdy80WEm9mTh1Hg0p9Lgl6E5 N8/WMQA92+6PXwbNhKE3xMXH9XZsq6hWpFERtIM9pAeivwAs2Rf66t13iNKyAFFv k5Ea0+EGEU/89ItpxKSmyJyHvpa745Ap3HrItI7zKG3yqm9U1CxIi/T67/mPIM66 eIfAwoY4VUcM9Z2KqEnsAiB5LaX/JK9ClcaZZmaM3v/wPZQU2Rdb6+iSAG6FmYEk hJ928xUc0EB4nx51fC7fN9/8/KfnBqGyfsPauifdc2Iaa9vzRC2zvMkm4IylOWyo 3GakyUm+45XY46JW+bJDVbvmUfLD5Cyg -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArcqZwpxSkKXCd2MZRjjq kMuJmfZYdkS9j2Cjz2+/sJxAHPJmhKNB4IB0S+QsiF8SmXemsh8o4zDLALaN6CO6 YWExaXQOZWDVpVV+tXOZoruJBgvdNcnaTJBAxUeoYqrcz53TO/JYnnz4DSqN1bJ3 xEUM7b41rdkpgOOz36sB0bOvL190nwXgNysm0qSUCkKqQa76lKTgtjVko7ryleND 4ln6UOcn3HOUPqpw1fuqB0r6NFKyvujqUXTDaaSynizgD3E9iZhEwfDtm98ZGrD5 FCYYSybW8yP3EhyYorPu7oADW+d7LlcPE8JrOMnl1Qs3VEWNqwf8SFfkgekpw+U6 J9mCgEmwwbEeiGbWPTL1+iLQ+FpwWjMHx+epAYR33+ttMzZmpwGPUtP8B6DIRi+A SErYwtpn+2rl0LiHvyysgScCwqOySrX7Ban7xRotPpa2D2rl3jSGbDeb4iKbLRWq bA4LwJIvkKTqLgJ3OTm1yrVSBtbv3LslSK3bFCj0rqQm/X642r2zIzCPtxHpNfLI WY4YpnRMJkrpHmgYslGp38OIkkfWsJ11tdQ55HKwJ1srLF28w03vDWCZxeaLzyU2 a5qx4cdMqom2e9ZeVWxo5az6Sc15Cu3xdxADBt+ya9/KJSURKKQumqO08NsWCo9w VBdy7zstT+4xjjprh4ycaIECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 40302811142964285682849387309652171471 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onna.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709007089553069705154770766640633779934307574317505109784948313079249727689366153132153072851996668694989493147095989812436733694670743355038078157689889115634633648786636978288499753978414954350195865145731856507956594168434428701730546507607632990608050040564898174239817353140213740289876535040338583361706898701039749725293527586104940764999802589576374884535491230565821991903791594239262290985260366617395257238343262391302160569630999972844503999781991670164472213419135382667598552132855978458189346579475748432674989176566478580744214421924611734273996999060031773451839775044925464072310502208563183544543276713744440318741563980163215567069967403628043538173938798359908250789743495920655616569282308218204783369874028252018828915178698382012471003917095369421195408899412768308806501170399874566938379680757197733586880005089179658067107420924612463873195096673453876745964474229499423209708648969827985368018567677183053659977599890211500817628750148627893541779007339880379907132659256360307758345297131496861833628581323552431914085376815600120649582093331331481887012273040405212329631706878060084984083862095259958296686523669849876927019155909150238684563639120370652099309914928212867869364634440173584811107838081 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9cfa773ee743cd774c48497713fe68966f053177 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onna.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onna.be' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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