www.precena-ls.com

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 30:d1:d7:02:c8:96:ae:bd:63:6d:55:47 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.precena-ls.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 30:d1:d7:02:c8:96:ae:bd:63:6d:55:47
Serial Number (int): 15108961327865258099975476551
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 10:5f:1d:cd:49:b1:ae:d4:f7:69:a2:92:e7:0c:e9:d6:3e:3e:35:55
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): e8:a1:e0:60:ba:0d:95:9c:62:d7:3c:f5:03:f7:54:e4:cb:9a:5b:a7
Fingerprint (sha256): ea:83:34:da:9f:cc:2a:8c:b7:41:1a:e6:5d:2c:0e:5f:97:c0:3c:d4:4f:eb:df:9a:00:8e:97:a0:97:2e:f7:29

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.precena-ls.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.precena-ls.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.precena-ls.com
precena-ls.com

Other certificates including the domain name precena-ls.com

(limited to 100 certificates)
blockcommunicator.com
mixdata.jp
www.precena-ls.com
tech2space.in
www.coursewright.com
veridocs.in
www.grilldelivery.gr
cccjackson.org
aventuraextrema.com.co
i.campaignus.do
wesense.ai
www.precena-ls.com
marketingdeafiliados.info
eztechsolutions.team
jysinfotech.com
coffee.yandl.com
glemmo.nl
kmoriarty.ca
thaibelconnen.nextorder.com.au
connect.precena-ls.com
www.precena-ls.com
precena-ls.com
www.grilldelivery.gr
onegraph.com
www.mojiseed.com
www.precena-ls.com
kinnsi.com.au
jysinfotech.com
lookatthisgraph.com
firebase.tiketux.com
removethenotch.com
www.sigscale.ca
awakenedhuman.io
www.etlinn.com
www.poboremo.org
precena-ls.com
tashcoleman.tombewley.com
www.nancycorrigan.us
www.mojiseed.com
precena-ls.com
opendoorukraine.com
lelennyface.com
www.precena-ls.com
connect.precena-ls.com
goshiplabs.com
idriskadri.com
stage.setupbiz.co.in
www.precena-ls.com
omrips-app.oz-tms.com
www.precena-ls.com
www.paulwhite.codes
blog.rubell.com
lookatthisgraph.com
www.precena-ls.com
dev.eblocky.sk
test.flood.bot
coox.in
www.avinabaray.com
laitinen.cloud
www.precena-ls.com
betania-kalender.vitterso.net
app-staging.onedee.ai
watchhouse.5loyalty.com
watchhouse.5loyalty.com
medeamp.com
blog.rubell.com
www.precena-ls.com
open24seven.co.uk
onegraph.com
fotomajhenic.myphotopal.shop
lightapp.sisgep.com.br
test.flood.bot
glemmo.nl
light-service-kr.com
www.precena-ls.com
alen.sortingnet.com
mentoria.oficinadaaprovacao.com.br
www.okaypandas.xyz
kmoriarty.ca
www.chorusrgv.org
alen.sortingnet.com
coox.in
www.precena-ls.com
www.precena-ls.com
laxman.org.in
app-staging.onedee.ai
www.precena-ls.com
www.karimomar.de
aventuraextrema.com.co
www.precena-ls.com
etherscapegame.com
www.precena-ls.com
awakenedhuman.io

Certificate

The complete raw certificate details for www.precena-ls.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85+Abupv/DeUYRSjMaZ
pk2pZysBTXvktgkkB2iQd+2ozX5cPjFrGjRy2+V8W9y6Mhf+CMYpHIINQoh1hcfg
gh9HIXinRoab9QeamBb65VKFvtkNZBM3c7viTeUr7oe/pdVwtD4Dx9lwNRikFnhm
oJ7bL7Ya4eWSnCp2qFoBHBwYloU0KK4HGzmY6NgkJ/VprvM6PONBQw9oG9ZDSf3O
OYA+WTZeuiIr4/Z8iZfprA5h8b31Oa19+XYZAAo9E6fwlqc5d+yZKOMyYLhNKymu
JprcsBX2O4yBVRidPGKXhhPhhvS4DSdREKtCbOHadYjImsmx+T+NRw+MpuEanxnY
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15108961327865258099975476551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-12 09:05:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 07:56:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.precena-ls.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20678668815237193472345230994546773133023929612511498409611845637963271067687719377838544897884631805595401306981693190315371866711710261476190846526697393603453311736625878016927118347274912009114760332789297968490734306647951560798463120752005026009615465530836661623906969930191729704916903952734618217543331636495928418777443307625993437796454754277687108301708619808188920125478331832432529864198604490619037523843487754426132830222965395281386185829756144359402755042282644975538709304849005308541411874647273217442395374402389698202982399638685295625159889033750515071919165131813138114451360819690720357636207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.precena-ls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precena-ls.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							105f1dcd49b1aed4f769a292e70ce9d63e3e3555
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							025800750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000157b8237796000004030046304402203b52290cc421aaac0fc1384f3af563d095fa60e4e0204459fd0aafde06abbff402201add67ba42eb265efe89b871139ee22b1a5baa070349d5537114a281b08527ed0077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000157b82379920000040300483046022100fd5215ef89b2f390f892c052e4a10f9eeccf197e86eab8eca0462092932b3ce60221008aa82e27901ecd265c3ee2318d1ce5d71c47ae733fd10fb2cec69638ad9251b7007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000157b8237a2a0000040300473045022100ce91be5efbd72b77e8d622f0e068ff0a696fdd568e4604999f4700993e0f3070022073b706ceca95c18208cb15138458a3d65583f7a0f285f774e18ad03d623db2c4007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000157b8237af3000004030047304502206d716a10123316234147b22dc20a9e293efa3ecaf018c8881a0ccce7339546550221009aa1830374e803a0d6a84397ec8b2851ea4b94dc4f994d8cf6b1b287491c4c49007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000157b8237d1d00000403004730450221008b1a756a86a99890304a6cfdfa2fcfd6b2c225c0215c10a1d33310eb4388a173022022d5ebf05319d209275e46db5b3b3fa72b63844f86b0cf629506b48a157779e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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