zubairautomotive.com

- ZUBAIR AUTOMOTIVE GROUP -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 33:80:3e:bb:73:b2:26:a4:34:8c:cf:f1 was issued on by GlobalSign nv-sa.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ZUBAIR AUTOMOTIVE GROUP

Organization: ZUBAIR AUTOMOTIVE GROUP
State / Province: Muscat
Locality: Muscat
Country: OM

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 33:80:3e:bb:73:b2:26:a4:34:8c:cf:f1
Serial Number (int): 15938774250399119087929970673
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 56:e3:a0:e4:70:22:63:90:ad:69:a3:e1:e7:ee:68:e1:03:9e:df:09
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 74:4e:59:e8:e8:e8:ec:8d:19:36:aa:b0:59:cd:0b:87:21:d8:fa:b0
Fingerprint (sha256): d2:0c:36:19:1e:2f:38:0d:ba:a0:6f:35:70:97:ea:73:df:d9:a6:eb:51:fd:d9:89:d3:33:f4:ae:26:38:7d:ee

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate zubairautomotive.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zubairautomotive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zubairautomotive.com
gac-it-htcasrv1.zubairautogroup.net
autodiscover.zubairautogroup.net
mailhybrid.zubairautogroup.net
zubairautogroup.net
mail.dhofarautomotive.com
autodiscover.chrysler-oman.com
autodiscover.dhofarautomotive.com
mailhtcasrv.zubairautogroup.net
hybrid.zubairautomotive.com
webmail.zubairautomotive.com
mail.zubairautomotive.com
autodiscover.zubairautomotive.com

Other certificates including the domain name zubairautomotive.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for zubairautomotive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCaja2o/hUi37Qno+uDe
bDm3Wu1fStsaHWCBkXe/oLskL7WDOtCWRtZ+0DtVDy9FZQSdSXaF+Vh5ly27DyNk
UX51Gj1kKAe/AtFPwiHoOYJ6G2as+RLnznM78KgmSsHYqCN+W3WxvMhxhWlDm8r1
Rr1G26K26+Z60pxDKXuXFpqDCvHQ9xHqR2JnObJyv3uGCyz34n2JxarCjcarK4SB
TFw9lybk9xFK9Nu+qzTOLthdKcLXm5BX4j1HoCVGBL1Ta/mx6gtkl2HlIQPxRif0
cKA/42ZBOxPHBV4jOKETRnoD6u0Gsz8pAi36mA27Qiuzew7oxVeWf75stwiAvOQA
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15938774250399119087929970673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 07:56:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 07:56:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muscat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muscat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZUBAIR AUTOMOTIVE GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zubairautomotive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18197369199456093910088558206058351110772775459085462330933121522097355362118233725394085714320994121568713826725715119866054809854544015678792488565190252703123478523015237052387717817944460709175118101316733458684632215946310545122235842435717520734244998992638867818540217349789627458070114888060345248541278333311332555428349918221299928893961046326237095955144158719959907765401000677404011014450671991425330643363315764175850873814928726855873396814302382403588681794764597752044857193575457925449211115297134173220498669253114587357497918162104166704392774590618625954288189617062655200339905102954142678384733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (398 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubairautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gac-it-htcasrv1.zubairautogroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zubairautogroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhybrid.zubairautogroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubairautogroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dhofarautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.chrysler-oman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dhofarautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhtcasrv.zubairautogroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.zubairautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.zubairautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zubairautomotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zubairautomotive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56e3a0e470226390ad69a3e1e7ee68e1039edf09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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