www.mepos.com.tr

- MEHTAP MUTFAK ESYALARI SANAYI VE TICARET A.S. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 6c:33:87:eb:e2:67:08:14:27:b6:cb:a6 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MEHTAP MUTFAK ESYALARI SANAYI VE TICARET A.S.

Organization: MEHTAP MUTFAK ESYALARI SANAYI VE TICARET A.S.
Organization unit: IT
State / Province: ISTANBUL
Locality: SANCAKTEPE
Country: TR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:33:87:eb:e2:67:08:14:27:b6:cb:a6
Serial Number (int): 33486678148279675291866418086
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c5:69:30:bc:d5:6f:57:8e:62:c0:c0:c8:20:0c:70:b3:54:24:c8:02
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 91:c0:1d:5b:4c:8a:6c:37:72:ca:48:33:f7:6f:3a:02:58:42:30:ff
Fingerprint (sha256): c8:e2:81:90:78:f5:67:9c:6d:8e:4d:df:5e:90:b0:2d:1a:13:90:18:a0:9a:70:be:af:ba:d4:c2:b1:19:d8:b0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.mepos.com.tr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mepos.com.tr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mepos.com.tr
mepos.com.tr

Other certificates including the domain name mepos.com.tr

(limited to 100 certificates)
alisveris.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
www.mepos.com.tr
www.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
www.alisveris.mepos.com.tr
www.mepos.com.tr
alisveris.mepos.com.tr
www.alisveris.mepos.com.tr
www.mepos.com.tr
www.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
www.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr
alisveris.mepos.com.tr

Certificate

The complete raw certificate details for www.mepos.com.tr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6jyhc3W7wcX3Y2+hLsP
v4N+L/h6DL3t+Ya+RBzUW+7vve0cWzhFl4j/Sc7mGkt8Yjeu6U8NeaWqiQeadLVe
9LxL8oKJWWfVZs0ELBhMMiMTs6nXSPs58bYMGVpCWP67c4mRqQ0FGW+1JtWfpqBk
NRFdt5ts6BKdaGn7SIXK3KnyYEudfdQzhihFm9IhXAjv3vE3usx42T8F7SrAY6ax
afB6SweQH1ikCZmJZEVu73uaUk3QXbXuj5c3kt0vkItKS1uTS+6GKm8fvtaTKDr5
hnqXL/ydcKjGS7gXscaDhLSEFFtNC6vmOM0VQiGNtaXYrSW1r+N+Q0p3UJzYDhU1
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33486678148279675291866418086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-16 16:02:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-04 12:17:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ISTANBUL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SANCAKTEPE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MEHTAP MUTFAK ESYALARI SANAYI VE TICARET A.S.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.mepos.com.tr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24699780513776689046745053338129519861371238742867367993639996563672956340132436445293509107533834848913523956051823253254108330094676308421266264102127499900625231615598546569865127766112348931209391401397657865176161072745927833325863222161666241813840155413155254123185985435375656967433870697700630509754919872292252722313836131062874688388545352011171900635764205461608682362658042255159064587965884554335137307091809277123260799318513803579397759464248923367842571095381720836991452768342156356196123373553639350214252165917439317551013333306321327927621047468637518287296521039697785148134771016601739342460391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mepos.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mepos.com.tr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c56930bcd56f578e62c0c0c8200c70b35424c802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000017183b9f8980000040300463044022001529a6d8fe8b543c9b31ab4984e95558c8cb32ab3515a1eb9843847d748095b02204de524786b78fa1276f09f6210ad8239e93f21e8b5a812e606e06769359b59400075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017183b9f54e00000403004630440220683351b5d6677add3f588989f862f9fd07241eaa370960ee356886880e91f03f022059bfb4553b3cd70fd5628e07c50657277666ef3d3d89d053ac00134c65c4487700770051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017183b9f807000004030048304602210098239eed90ace3f7ba817b0c5219971d88b0d7f5334a498de9ac9e0cae75e0a0022100b5d91a08313f17066389c01c1449449e5b44ad6caea7b412d682d511568710d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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