application.novonordiskfonden.dk

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4e:52:4f:f2:e9:72:e8:4b:c2:c1:43:a2 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=application.novonordiskfonden.dk,OU=Domain Control Validated,C=DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:52:4f:f2:e9:72:e8:4b:c2:c1:43:a2
Serial Number (int): 24239340231159290462812062626
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 15:2d:22:f4:67:64:56:ce:96:1e:fa:4b:84:4c:28:d2:d6:90:6c:2f
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): a8:67:d9:87:fc:88:87:c0:c6:ed:7d:b5:40:c6:58:2e:ef:74:8b:10
Fingerprint (sha256): c3:bf:9d:22:72:76:bb:88:0c:56:af:99:c4:f5:18:7f:5b:30:78:eb:55:8a:2f:df:27:43:6b:ab:c8:81:77:eb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate application.novonordiskfonden.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for application.novonordiskfonden.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

application.novonordiskfonden.dk
www.application.novonordiskfonden.dk

Other certificates including the domain name novonordiskfonden.dk

(limited to 100 certificates)
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
novonordiskfonden.dk
*.novonordiskfonden.dk
norma.novonordiskfonden.dk
budgets.novonordiskfonden.dk
ansogning.novonordiskfonden.dk
fond.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
steno.novonordiskfonden.dk
steno.novonordiskfonden.dk
*.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk
norma.novonordiskfonden.dk
nnf-gpt.novonordiskfonden.dk
*.novonordiskfonden.dk
cbc.novonordiskfonden.dk
novonordiskfonden.dk
application.novonordiskfonden.dk
application.novonordiskfonden.dk
impact.novonordiskfonden.dk
norma.novonordiskfonden.dk
survey.novonordiskfonden.dk
application.novonordiskfonden.dk
nnf-gpt-test.novonordiskfonden.dk
impact.novonordiskfonden.dk
novonordiskfonden.dk

Certificate

The complete raw certificate details for application.novonordiskfonden.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9aXITFOuEikr8eTNDsG
fRG5RsAae4SLUKGHEyobKW3Lng75yn3I/c4iZoyGduv9O8yyZM1pvxdPMMJ2brCz
WVcIYJDgDGe+VnZeeTBM8AjUo2ZiSPq5JRR2eko/5HpqvFpMY8P024jin+NHduRW
X6ulA2+moHKm7ymwHwHFFKUySjOsPlI4tJLFCYpMnGY4skAe7ZGjxSrDXpEFEAXP
g7OI8ew3C9Bzu/ccHbmDqXTMPoEd6DFxBnU7JqpL6SMMQfWBOfJT1X3HayPcAPCC
/OzM+B0k3LHgtYoCpzSx8TFGTmYB+gUlduLVR2HFMMAiLtDOnq1hVdoGK7xOZ22i
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24239340231159290462812062626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-17 09:14:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-24 12:35:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'application.novonordiskfonden.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16643036396159074849422820223546370204279133934701220800580860394417669310031231906585294738038784657254895649331623422600708155084003189964348277677776190999225002998807225084593321715812997423903641413995773657337259767971813324003823472062701698782291508061530841598618629646502009381108347503689911275183123450611937166507902847637670477156084161282990874373402516410222881178679595203198503358193504924492070038025021514415127152866914737577859598603416300849148198170369852517840551709158606266713430404105902952186859155939954373927375842968706326372174974229512991895492220421083082603130357649828868113932893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'application.novonordiskfonden.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.application.novonordiskfonden.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							152d22f4676456ce961efa4b844c28d2d6906c2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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