*.hrdantwerp.com

- HRD ANTWERP NV -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 24:59:bd:08:26:db:38:9e:14:78:8d:96 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

HRD ANTWERP NV

Organization: HRD ANTWERP NV
State / Province: Antwerpen
Locality: Antwerpen
Country: BE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 24:59:bd:08:26:db:38:9e:14:78:8d:96
Serial Number (int): 11249947429153233268203097494
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ff:ca:89:0c:63:f5:73:56:a8:bd:55:96:f2:26:2b:9b:da:e4:7b:12
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 7f:2d:90:05:d7:d2:6d:57:87:f9:31:47:d8:88:11:ae:0a:72:fa:13
Fingerprint (sha256): d6:c7:57:af:bc:ae:75:82:2a:a0:8f:88:ab:89:4c:43:f6:5d:ae:d3:fd:e4:8b:8a:2b:1a:93:4a:5c:9d:41:0d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.hrdantwerp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hrdantwerp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hrdantwerp.com
hrdantwerp.com

Other certificates including the domain name hrdantwerp.com

(limited to 100 certificates)
hrdantwerp.com
hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
content.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
development.hrdantwerp.com
content.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
hrdantwerp.com
*.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
content.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
ict.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
*.hrdantwerp.com
*.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
*.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com

Certificate

The complete raw certificate details for *.hrdantwerp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHxRy1mz2u2IIeQwbmSB
G5TEg7W6Mdp6KdyiBCz7ufdj/j2rZJtgNLbN2HWxhk/N/xH7z4yzP8f2jON9GEPj
Oi/VhYT2yupNHCN2tpeCBMbTQRfM1tWK/mrwUIVp3DVs/Vd2DxidGxCsVFaiQz8r
F6nYyVwsfyNyWy6tUWMh3DOO4z69pF5qUW6UoK8Y/QN4k4IXx4FSvfkmOPbkKJ84
lRSKRVQ8zjJKQJO+BtwYK+pwP13CeEDWd8TlgOz/U5iEgHyGZrs0MlFcCWQROQ+t
/sP2Y1plBAgVg8x9nzYUFo4XbbZCh1yavyA0IvkFAg51jwgVr1tRdgTk0RVWbUfS
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11249947429153233268203097494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-25 15:01:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-26 15:01:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRD ANTWERP NV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hrdantwerp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23289152348547338583679601646809380422662818226553834902524779092545787766981190821874287828035833503499060464481639302056092379443562855540682588813014993098983594165760013859496376789455128063023082940826865253241914174396854271020658185265138328115157210156165501277516212853874366724634230682362678044787373280086196107592222424267855436928821385458148412423984122364788683604512090420717009276059892494426443009041277597084714511188359766597497713696986121288329037538792573922156356329084303858728762857622170749983805348502149300926628466958333306277637092840104172696896431781820893177840914773447192680583891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrdantwerp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrdantwerp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffca890c63f57356a8bd5596f2262b9bdae47b12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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