xn--blq35e5y3ddkclsr.xn--j6w193g

- Hong Kong Internet Registration Corporation Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1e:cd:2a:73:71:a2:99:ad:71:9f:20:9d was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hong Kong Internet Registration Corporation Limited

Organization: Hong Kong Internet Registration Corporation Limited
Organization unit: IT
State / Province: Hong Kong
Locality: Hong Kong
Country: HK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:cd:2a:73:71:a2:99:ad:71:9f:20:9d
Serial Number (int): 9532580556617476086983237789
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 1f:ad:cd:ea:8c:99:63:fa:b1:69:34:b5:36:ce:07:b0:ae:e6:97:bd
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 2b:2f:2f:95:fd:ba:0f:1a:9e:84:bf:92:a0:31:fa:e5:d5:42:b7:33
Fingerprint (sha256): ed:b0:20:d6:bf:f5:60:d7:d9:37:4d:17:6b:97:80:cb:27:97:3b:6d:ee:40:62:c3:67:d5:a1:fe:ad:f0:14:19

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate xn--blq35e5y3ddkclsr.xn--j6w193g

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--blq35e5y3ddkclsr.xn--j6w193g

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xn--blq35e5y3ddkclsr.xn--j6w193g

Other certificates including the domain name xn--blq35e5y3ddkclsr.xn--j6w193g

(limited to 100 certificates)
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g
xn--blq35e5y3ddkclsr.xn--j6w193g

Certificate

The complete raw certificate details for xn--blq35e5y3ddkclsr.xn--j6w193g in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA9HkauyyQOmslBa9n/x
irj9NqhJU8Nfn10RNHmF6XL3U/KxWLjz6hY8RyWC6rOkprwOpKy/Zcg5oX+vfVtg
iWwAlV9EVyroRT0Bo3kQnXK47rtU6cBaQosK+kBBUt81KT01XwqlqErF208U5UC7
OtuTx8iVmiOfwsr2O2eEAJ3QUveU4vAG0wvD928ddpITSgzo6PgSEC/cRZH9kixA
MRB16A7Y9MjPd45hLCFAmIMXQb6Vm6MItx0VzA4vwcQPnzHaWA5qBHJl/AiHLRkJ
0iSTmzmzia0v7HePzgSHd982vaaUbVh1uKsAM6O8Gf+cFyoqX9MznVMpr4lKec15
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9532580556617476086983237789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 06:16:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-31 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong Internet Registration Corporation Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--blq35e5y3ddkclsr.xn--j6w193g'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22225476309091321395966970989246362078413860811777181770409403342043246737914317299576896938303499895546048914600644270514537909037475538131509443406486566941028769560517614690608248606719376139026811951951783512578444418877733731937394711627573913498329834737472955149962083002066642850874127653074920332318372649723250149192761596799353943663440240272562951352923338095083646579182302522646839609123163751868433099519774697669856875760354049432701827959600719871700361732981010063196581641590769646104815284201423744838345203943859732454201194547254700798531511831766461866362090360969458069831557372690160281287139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blq35e5y3ddkclsr.xn--j6w193g'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fadcdea8c9963fab16934b536ce07b0aee697bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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