*.connect.vault.one

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 3e:10:2f:5d:83:05:17:cc:28:7f:85:13 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.connect.vault.one

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:10:2f:5d:83:05:17:cc:28:7f:85:13
Serial Number (int): 19207637098250100415517394195
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 7c:b1:51:b5:76:ad:c9:c5:36:55:75:4e:8f:3f:47:b6:58:ff:09:a5
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 7d:c4:ad:d8:06:63:28:ef:cf:45:cf:b1:33:fe:26:a9:64:03:68:7e
Fingerprint (sha256): e5:58:05:50:68:46:b2:c4:db:d2:b6:80:19:98:a0:a3:01:de:0d:e1:96:2b:8e:56:aa:0f:84:41:e5:e8:64:1a

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.connect.vault.one

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.connect.vault.one

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.connect.vault.one
connect.vault.one

Other certificates including the domain name vault.one

(limited to 100 certificates)
*.homolog.app.vault.one
ssl391718.cloudflaressl.com
app.vault.one
homolog.vault.one
vault.one
*.connect.vault.one
*.homolog.api.vault.one
ssl374116.cloudflaressl.com
ssl374114.cloudflaressl.com
ssl391716.cloudflaressl.com
vault.one
ssl391718.cloudflaressl.com
ssl379498.cloudflaressl.com
*.app.vault.one
ssl374116.cloudflaressl.com
vault.one
*.app.vault.one
*.homolog.vault.one
ssl391718.cloudflaressl.com
ssl374116.cloudflaressl.com
*.vault.one
app.vault.one
*.vault.one
ssl391717.cloudflaressl.com
ssl391718.cloudflaressl.com
vault.one
ssl379498.cloudflaressl.com
app.vault.one
vault.one
homolog.vault.one
*.vault.one
*.connect.vault.one
homolog.vault.one
ssl374115.cloudflaressl.com
homolog.vault.one
*.vault.one
ssl374114.cloudflaressl.com
*.app.vault.one
vault.one
ssl374114.cloudflaressl.com
*.app.vault.one
*.connect.vault.one
api.vault.one
homolog.vault.one
ssl391717.cloudflaressl.com
ssl379498.cloudflaressl.com
ssl374115.cloudflaressl.com
ssl379499.cloudflaressl.com
sni.cloudflaressl.com
ssl374116.cloudflaressl.com
app.vault.one
*.homolog.app.vault.one
connect.vault.one
*.homolog.vault.one
ssl379498.cloudflaressl.com
vault.one
ssl379500.cloudflaressl.com
ssl391717.cloudflaressl.com
cdn.vault.one
ssl374114.cloudflaressl.com
vault.one
ssl391716.cloudflaressl.com
ssl374116.cloudflaressl.com
connect.vault.one
ssl391718.cloudflaressl.com
ssl379498.cloudflaressl.com
app.vault.one
ssl374116.cloudflaressl.com
ssl391718.cloudflaressl.com
ssl391718.cloudflaressl.com
ssl374115.cloudflaressl.com
app.vault.one
connect.vault.one
ssl374115.cloudflaressl.com
ssl374116.cloudflaressl.com
*.connect.vault.one
ssl391716.cloudflaressl.com
vault.one
ssl391718.cloudflaressl.com
ssl391716.cloudflaressl.com

Certificate

The complete raw certificate details for *.connect.vault.one in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfdtZ7D4FKLEXaQ+z8EK
pLYOZcx4GiVvzVwWB4Nfz9KNu5q1OuHu5Q+Be51mpuJfIS5MQkbh72dZnNqPqTOk
p9K1c/1I3ukHbnv0E4ESS+8Xyft+fBRIZD8LyqSS3gpTv4dOpxiIm6Rwl+PCqpRg
hZd5Sm3bqbxGY86xRW15YqKfS9o1hFRjy0jm0VFu36p5O9qPCStbzXNMULmgBvht
7yjtaB9qtkkH+bzNZZf79QWrraMuX36myGyN3BN5j711b3ZDrJkt7V0Q3uw2dYR7
053BJpNkJIIhDKQj+XtfWPrUb4saF9lq9l7mMWFy3lv2K6qhDbJS3N+FowPuHlic
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19207637098250100415517394195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 16:56:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 16:56:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.connect.vault.one'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19941424860001612530535430373029089181985598413385140207965037909085210890115492360738938867228600115515702872029815423007292640649846781815181026773794473809064233043416308052673103710353089294023554514462550400304677356574433868176032174223223226445937107475758454626388533680798965885718029402328337565145090651197244221977476726105548406025552874297276657103396161177546758791542557034875391957019045743317319217428682037366597144213494756211960335099106669675116581819683846656907333319989975470246463683432418964767556844868347756320566306662253343672661549645002593836984087492536993587945476482924447738141887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connect.vault.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.vault.one'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cb151b576adc9c53655754e8f3f47b658ff09a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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