*.werken-glorieux.be

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 30:99:21:67:af:1c:b6:a2:d2:6d:b4:3a was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.werken-glorieux.be,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 30:99:21:67:af:1c:b6:a2:d2:6d:b4:3a
Serial Number (int): 15040403872552336919312053306
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 6c:a2:7d:d4:70:ba:a9:9e:97:73:43:db:e1:2c:52:57:05:e3:1f:09
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 3c:21:a8:82:c4:43:9a:38:bf:71:a3:25:28:df:81:f6:42:e9:d3:01
Fingerprint (sha256): cb:af:ce:47:f9:ae:82:19:40:4b:94:81:4b:7d:51:4f:8d:ed:f5:c7:be:3d:52:b2:ed:d2:f8:f9:b5:90:5b:ca

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate *.werken-glorieux.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.werken-glorieux.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.werken-glorieux.be
werken-glorieux.be

Other certificates including the domain name werken-glorieux.be

(limited to 100 certificates)
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
csg.werken-glorieux.be
werken-glorieux.be
owa.werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
csg.werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
csg.werken-glorieux.be
exchange.werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be

Certificate

The complete raw certificate details for *.werken-glorieux.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFO6TZ00D+OHtx57aK2v
9ul71hXPCUnrLU9JUTAfdCFF1znhKvR6OrClFXkE3LKQ5yqj8hdpRLlXYsyMuOL6
cxngiGnQfKEKZ4YC+NAzp4pnZhE3WGgG9K8hVefdT+8wTxmQl1kH88mEoDYI3tTZ
2s1Soqmk9RbbMsOPdaMAhxEyQCZTzmV0edxyfQdcKeGxmwTOFgatNy3hFUPkUASJ
xx1cYSjJfIL1YvPu9nTREo5AKrfB1WbfWLzi8y8bEZw+WFD0pl9LTuyUcUb5n3bU
6fzkxFkmX31KocVvPxEfHsHE6QmL44N72DPkgVHLLalcXf/ckTsVuVNAo6F4ieXl
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15040403872552336919312053306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-16 13:11:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 13:11:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.werken-glorieux.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21754276144920897377470145278085453641090242940504736204350629902247584854173806999245299445081784395232049223639908465244709246193836097701076289123777635502665844346771190725314281929423946753813358548055168045681038754293900400707848544626106344978224047923986026771142830766214419771946468960811871737375764478688586532532044044124013566620334740873798770930524889045009091819757973413032875028798174445415992923135672905582075099911662410359161662701087197927916855909259400672750295429941558947133409841746535040671401295166907834487515833100421463498991792218702402976394464533348062637537691109801839319967101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.werken-glorieux.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werken-glorieux.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ca27dd470baa99e977343dbe12c525705e31f09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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