beniouraindirect.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 1e:20:be:60:07:42:89:49:c7:9e:7f:f9 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beniouraindirect.com,OU=Domain Control Validated,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:20:be:60:07:42:89:49:c7:9e:7f:f9
Serial Number (int): 9324134941910327960744656889
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: a6:9a:c4:4c:fe:a7:fc:6c:50:cb:b9:a9:d3:82:55:e8:ec:93:d9:44
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): f4:78:c5:22:d2:55:df:aa:01:ed:ab:5b:23:22:1e:a6:7a:36:1e:51
Fingerprint (sha256): de:08:af:c7:0e:37:2f:f8:32:f2:dc:f3:b2:bd:ac:e0:59:e8:5f:9e:82:b4:b0:00:3f:08:02:0f:ac:98:f3:1c

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate beniouraindirect.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beniouraindirect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beniouraindirect.com

Other certificates including the domain name beniouraindirect.com

(limited to 100 certificates)
www.beniouraindirect.com
www.beniouraindirect.com
www.beniouraindirect.com
beniouraindirect.com
www.beniouraindirect.com
www.beniouraindirect.com
www.beniouraindirect.com
beniouraindirect.com
www.beniouraindirect.com
www.beniouraindirect.com

Certificate

The complete raw certificate details for beniouraindirect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlZB2/elCAi81LeOQX/+
zJbUZytkALCqGd6+pDCoRgOLFlSTPHmLSb4SyluOOvZV8caW1h/PDMsGWHSjkjTj
52VHo8cCms6bYRdvEjp4UxQaUSKoB0jT1uLaPnVPiqMI7rB3LNIAhGP5bEhbaxq+
yLhruuk15kL1+Ob1bKgA4SbLKxnbR2rKCMnq6IT92Z0D/47s5mZYTKWdQAqvzGRF
5h9XlvhIY8YbDjpq/iTehVp9zrtPjfqz4LsWcFClm1gfvvek3jStRClBtw/0JGiC
VHo05G7EYCJQW3Qg5iDzr/wQdQQA7S8dG8mxgKxw+UZ9WZxKt38FZW5FTM6w8ZrL
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9324134941910327960744656889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-29 10:46:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-30 10:46:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beniouraindirect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23017906545355634920883077407995802352877528524215855619953523085435516567305987696904141413303400463775745418899280040788763805411693897544946881218675704230401907653626303051993649309328923304963922243662685714971675378328241251675640763074048854497655197922384109585386033732278959653336569020243511242537940043823685482349765833553599571529475460256061431188856450791267463860655973400509178181650144275954270239840599806709912300596964334573788028689531105167546021107816046153900033228161456923787385114751605161200372350606396218676728534627432507841850292574252968988074577892896394695051564791954945294912273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beniouraindirect.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a69ac44cfea7fc6c50cbb9a9d38255e8ec93d944
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							025700760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000157758dbff600000403004730450221008816e75a230131ac90c558a41152a2992372823f790688f68eee1b8752d55e7f0220620b1fbbb7399164c9915ca19510fd2e2d94b801a602c4dda143434fa50969e5007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000157758dc7460000040300463044022050a630e530d48e79fe2ec941972ee8c3ca8ccb932874ffe52c1154c56a244d8c022062ef7784298229014f5e64616feddcf242606a0e6e257a1ed065921cc42583a7007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000157758dcf8b000004030048304602210092210d31a69f62c5a0f184cbff299ed8a00d62b24867de6d78591c94690a78f8022100e0c4fc54d82733da2b89949b7c2d204c3b7783d2bbf59d0c00cf2d7a2f5a0a5b007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000157758dd4170000040300463044022055efd0f329824c1d7039c2d00c3b0cefe61297666601ecb5ddfa4b9dd939f6e2022040b8289bde1959f3c41b7e8affa4953dd3c9e8b6dc85f1ccc38b1b76eed2c66f0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000157758dd87100000403004730450220680d45fd44cdbd62ab3b581bff15f0ad3dac6bfcb969467a815442c11b2cc397022100955f7eec9d3589fccde3780fa5b852f27dc8d473fe1d56ee883840fe9b6cfe43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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