*.ovam.be

- Openbare Vlaamse Afvalstoffenmaatschappij -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:ce:c4:b6:60:57:77:aa:4f:83:1f:72:d7:0c:a2:22:6a was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Openbare Vlaamse Afvalstoffenmaatschappij

Organization: Openbare Vlaamse Afvalstoffenmaatschappij
State / Province: Antwerpen
Locality: Mechelen
Country: BE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:ce:c4:b6:60:57:77:aa:4f:83:1f:72:d7:0c:a2:22:6a
Serial Number (int): 1492413021304662649111200457815706627613290
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 8f:84:e6:31:b5:e4:00:38:cd:7b:db:58:a5:f7:47:1b:04:46:d2:5f
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 4a:67:d3:6d:13:c2:24:b3:e5:0c:56:8c:b1:18:fc:db:b0:c1:b2:0a
Fingerprint (sha256): d8:43:d3:c6:8f:71:88:26:0b:b6:59:c9:98:82:31:b1:2d:e9:10:4b:6a:c0:2a:2f:85:f7:0f:e8:ee:87:e7:2b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.ovam.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ovam.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ovam.be
ovam.be

Other certificates including the domain name ovam.be

(limited to 100 certificates)
*.dev.aws.ovam.be
jaarverslag.ovam.be
ovam.be
jaarverslag.ovam.be
ovam.be
*.tst.aws.ovam.be
*.uat.aws.ovam.be
*.uat.aws.ovam.be
ovam.be
*.ovam.be
K3000.ovam.be
jaarverslag.ovam.be
*.tst.aws.ovam.be
ovam.be
jaarverslag.ovam.be
ovam.be
*.uat.aws.ovam.be
jaarverslag.ovam.be
ovam.be
*.prd.aws.ovam.be
*.uat.aws.ovam.be
*.ovam.be
*.uat.aws.ovam.be
*.lt.aws.ovam.be
ovam.be
ovam.be
ovam.be
ovam.be
fluvius.ovam.be
*.lt.aws.ovam.be
*.uat.aws.ovam.be
*.tst.aws.ovam.be
ovam.be
ovam.be
*.tst.aws.ovam.be
ovam.be
*.ovam.be
jaarverslag.ovam.be
*.prd.aws.ovam.be
jaarverslag.ovam.be
services.ovam.be
*.lt.aws.ovam.be
*.lt.aws.ovam.be
*.dev.aws.ovam.be
ovam.be
*.ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
ovam.be
ovam.be
*.prd.aws.ovam.be
ovam.be
*.tst.aws.ovam.be
*.tst.aws.ovam.be
*.uat.aws.ovam.be
*.ovam.be
*.uat.aws.ovam.be
*.dev.aws.ovam.be
www.ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
*.dev.aws.ovam.be
*.ovamad.ovam.be
*.ovam.be
*.dev.aws.ovam.be
*.ovam.be
*.dev.aws.ovam.be
ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
*.ovam.be
ovam.be
*.prd.aws.ovam.be
www.ovam.be
*.prd.aws.ovam.be
ovam.be

Certificate

The complete raw certificate details for *.ovam.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseL1UYIi1XBLiPgisOPo
NtNBUsE1pQbul+ufcBrEngR5GjswGjdMwebdqf3A6qmgki9TwOGPGZQsQgtoDrJp
pM1nicfG/qm6y0dndeW1ZpmHin0SeEm0RK4nY6g9VDe9YI5jVlod4i0asW1cBdc8
NW7bbKIRYVWW+7/e6iTqwGXz4b54QJ+uTI8Ur5TfpyZzTPfcOn5RPVqmL5VhImV6
EWGos0eiBOUE9m0O+gHLJgvtx8p57x18CXOX8F8XVgbHhKiA+cPfcrFBvDeoPWKy
n14i6Y+1Yr3R25sn4lE7eekbc4k9TGtYcw3DHx+fP8tl5LEiXOiscW5GUwa5eUOK
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492413021304662649111200457815706627613290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-31 08:56:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-31 08:56:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mechelen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Openbare Vlaamse Afvalstoffenmaatschappij'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ovam.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22456097275594174116019112256154246926662516333695263356950084984261798564121940719786659117280155629867452251300517383522739043317098401539780397933527607781348030668229005543122352092397246353728924816793265825473727807712601778905401662669898122515989150856082713553585038865557623099128515789466828122742351189860259227283578087293548121745398225876996125925881420768740909199584584992757282708333170418157409019659627880105052144523911771060926694323387715468579249730408867148703747547099723599964875634200618090373387070021922944509217711722155070123213525132845655307719600070800306775103683859363829666515527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovam.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovam.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f84e631b5e40038cd7bdb58a5f7471b0446d25f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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