runningskirts.com

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 5d:af:97:92:ba:d0:7e:cc:e4:c2:79:15 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=runningskirts.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:af:97:92:ba:d0:7e:cc:e4:c2:79:15
Serial Number (int): 28994383715842598279686813973
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 20:0b:e1:9c:7e:a3:07:3a:cc:a1:e5:a6:05:53:aa:7e:68:92:4b:20
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): b2:b6:fc:df:e6:23:03:0b:f3:30:fa:a3:b4:bd:8e:c2:94:f5:e8:24
Fingerprint (sha256): e4:6a:a2:e7:63:76:4c:18:11:7c:58:a5:f4:aa:35:3d:09:09:83:55:96:fb:e1:01:78:2c:96:40:a3:19:3a:0e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate runningskirts.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for runningskirts.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

runningskirts.com

Other certificates including the domain name runningskirts.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for runningskirts.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RTtWlrsNa5TKHyAjdHQ
r5okEd8seSZv6my86F3Nu4S+IDzWWY5UIBdMkGGmAx3AWF8UWF05Eyj3s+MuBpEO
SVm5z+GxpkA/oNn98EFKxdNt/8C5abhXCCJcrZi2Y3Osc51VT4y9RMmPRowo14TP
rLzEJPUxhVhduSNSP4bpxg1WsZiExbuAJoOlNM/7bYu0nEdfgiI3QIyz2rgl8ZRf
pmK1gz3M6Q42a4q25gLwnII9YWz+twYXXnrzVkPW2cdQYfEQSixBFmJ3BZK5QJWu
tMp0l3cobyJRfYqR+INMI09MfP2A4s2eqzr4aYVvuRqKczsK+jdkBIuH0gyqVZWz
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28994383715842598279686813973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-09 03:21:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 03:21:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'runningskirts.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27404031744826745711601208981722178653677604854461368227822728011021612382208281781212680702238315307106463166786489093239264449201400832590351776892160507781189171991330117661966599533453291758762131269471091465817660357950747692073474290193537680706923159442793061288069559044355702845252902441807448362998510598666053739964520473972836432302962548947178817789533940154618183643952045772911762982287295206738195521742883479959008430327330694346847326789289060686084843096039973313321389463899466366392489854098950941549315524428562360302815220975520960987956274373527061652475854640792037482070165531092668762141557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runningskirts.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							200be19c7ea3073acca1e5a60553aa7e68924b20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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