sts09.frontdata.dk

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 1e:67:11:a0:28:9f:31:78:b3:05:c2:47 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sts09.frontdata.dk,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:67:11:a0:28:9f:31:78:b3:05:c2:47
Serial Number (int): 9409152888697032121518506567
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: fb:94:69:2f:6f:cb:f2:b0:bb:42:d3:ee:62:f2:2e:41:a5:78:7e:c2
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): ec:b0:c6:55:80:ab:19:c7:63:54:8a:cf:5e:d8:b3:68:bf:da:82:8b
Fingerprint (sha256): dd:c6:fc:4d:cc:d5:52:5d:9f:96:0c:cf:c0:08:fd:37:dc:b1:72:39:a7:f8:ee:d8:d0:46:43:1c:83:4f:75:44

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate sts09.frontdata.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts09.frontdata.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts09.frontdata.dk

Other certificates including the domain name frontdata.dk

(limited to 100 certificates)
sts09.frontdata.dk
login.fd02.frontdata.dk
Mailsecurity-rel1.frontdata.dk
fep.lync01.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
sip.itrelation.dk
fep.lync01.frontdata.dk
Sip.lync.frontdata.dk
*.frontdata.dk
www.frontdata.dk
weblogin.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
www.frontdata.dk
ssl.front-data.dk
cas.frontdata.dk
cas.frontdata.dk
weblogin.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
weblogin.frontdata.dk
login.fd09.frontdata.dk
vpn.frontdata.dk
soc.frontdata.dk
login.fd09.frontdata.dk
internet.fd09.frontdata.dk
weblogin.frontdata.dk
Sip.lync.frontdata.dk
internet.fd09.frontdata.dk
weblogin.frontdata.dk
ssl.front-data.dk
cas.frontdata.dk
weblogin.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
internet.fd09.frontdata.dk
cas.frontdata.dk
weblogin.frontdata.dk
sip.lync01.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
sts02.frontdata.dk
lyncdiscover.frontdata.dk
sip.lync01.frontdata.dk
Sip.lync.frontdata.dk
weblogin.frontdata.dk
sip.lync01.frontdata.dk
ssl.front-data.dk
sts09.frontdata.dk
cas.frontdata.dk
sts09.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
fep.lync01.frontdata.dk
sip.lync01.frontdata.dk
auth.fd09.frontdata.dk
login.fd09.frontdata.dk
sip.lync01.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
fep.lync01.frontdata.dk
sts02.frontdata.dk
fep.lync01.frontdata.dk
cas.frontdata.dk
sip.lync2.frontdata.dk
auth.fd09.frontdata.dk
cas.frontdata.dk
ssl.front-data.dk
ssl.front-data.dk
sip.lync01.frontdata.dk
ssl.front-data.dk
soc.frontdata.dk
*.frontdata.dk
login.adm.frontdata.dk
soc.frontdata.dk
internet.fd09.frontdata.dk
fep.lync01.frontdata.dk
sts09.frontdata.dk
cas.frontdata.dk
vpn.frontdata.dk
weblogin.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
login.adm.frontdata.dk
weblogin.frontdata.dk
*.frontdata.dk
www.frontdata.dk

Certificate

The complete raw certificate details for sts09.frontdata.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGBhgBhBVBfHX8iO2Z99
Wwn8uD1F9l64IdrMjtqVApHV97U2ZcX8/XVh3BSj+30yWZ2QMsp4NeB4iQCBxtql
bZA9aL6BPOzp4P7swsLtjx2Ldyr49Ih7ACB9K06xZ04OBQJp+vh2p0zp+h4BcGhz
4Ec6INCgQcSvwZ6UZ6xCx1I4aaipu89o+U73c+APd3i/AuuLOghK2TgsAJd8tPUM
c1yFonOrh+oTO0YIjusE9Hsuuj7ay/KKlS4s1L1E6coh7NsaQUZ/xD/X35UN0F8g
L77C1L2v1v1K9bDz6DbhS8B24z4joWUAklGyxDEogTga9Sj5vFS9G6n80l9nnyKK
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9409152888697032121518506567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-21 13:22:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-22 13:22:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts09.frontdata.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24285281727315980274166398656431986054761311945911770435475797551302318311672894324989865529429630690221305037210829364625686947933357247112646181201004270780066263998678259698535151847792776735133429605700050085228133343030752795189490513395817470704069426471845806849515776816352628380390544764490728128255809490573939778427638052940097526922731852781690905785435701056662491696771971148310504949102352959290330196045479087596481371379525112659696012446970194543572873469180685003111041605963235910921841925618882682672693301122509928713476308188047716160585062483963455090898948273660285952058770651103168055904937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts09.frontdata.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb94692f6fcbf2b0bb42d3ee62f22e41a5787ec2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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