vds.lulumea.com

- LULU GROUP INTERNATIONAL - SOLE PROPRIETORSHIP L.L.C. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 07:85:be:60:92:37:fb:8b:17:e9:b1:5a was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

LULU GROUP INTERNATIONAL - SOLE PROPRIETORSHIP L.L.C.

Organization: LULU GROUP INTERNATIONAL - SOLE PROPRIETORSHIP L.L.C.
State / Province: Abu Dhabi
Locality: Abu Dhabi
Country: AE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 07:85:be:60:92:37:fb:8b:17:e9:b1:5a
Serial Number (int): 2328081233813503898093728090
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: a7:2d:5f:b5:c2:d7:76:e0:65:9a:a9:60:76:a6:7f:3b:69:09:bf:82
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 5e:b9:3c:a5:b5:7b:d1:b1:3c:6b:4b:a9:ae:e9:23:0f:ef:83:df:70
Fingerprint (sha256): f1:4f:ec:88:d8:d5:67:76:37:13:39:50:a7:a0:76:40:70:dd:14:62:1b:4e:1b:62:ef:d6:75:69:01:cf:d5:b6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate vds.lulumea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vds.lulumea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vds.lulumea.com

Other certificates including the domain name lulumea.com

(limited to 100 certificates)
connect.lulumea.com
vc.lulumea.com
incapsula.com
incapsula.com
sni.cloudflaressl.com
demo6.platform.fit
incapsula.com
2fa.connect.lulumea.com
incapsula.com
lulumea.com
sni.cloudflaressl.com
admin.articwise.pt
mdm.lulumea.com
*.lulumea.com
incapsula.com
incapsula.com
incapsula.com
ucr.lulumea.com
sni.cloudflaressl.com
lulumea.com
incapsula.com
lulumea.com
ssl366448.cloudflaressl.com
uc.lulumea.com
ciqnp.lulumea.com
www.kultify.app
lulumea.com
sni.cloudflaressl.com
sbuat.lulumea.com
2fa.lulumea.com
*.lulumea.com
ucr.lulumea.com
incapsula.com
incapsula.com
nathanssweets.co.in
lulumea.com
sni.cloudflaressl.com
applinksstg.lulumea.com
cpg.lulumea.com
lulumea.com
sni.cloudflaressl.com
cpg.lulumea.com
made4families.shop
incapsula.com
incapsula.com
sni.cloudflaressl.com
incapsula.com
incapsula.com
vds.lulumea.com
dev.domainplug.io
qmms.lulumea.com
cpg.lulumea.com
sni.cloudflaressl.com
lulumea.com
vds.lulumea.com
sb.lulumea.com
vc.lulumea.com
incapsula.com
jesusfireministries.in
lulumea.com
lulumea.com
sni.cloudflaressl.com
fs.lulumea.com
stghybris.lulumea.com
incapsula.com
lulumea.com
incapsula.com
thepub.tresastronautas.com
admecloud.com
sbuat.lulumea.com
sni.cloudflaressl.com
ssl366447.cloudflaressl.com
lulumea.com
expo.staging.properati.com.co
sni.cloudflaressl.com
incapsula.com
incapsula.com
incapsula.com
vds.lulumea.com
mdm.lulumea.com
vds.lulumea.com
admin.chronox.io
sni.cloudflaressl.com
vds.lulumea.com
stghybris.lulumea.com
incapsula.com

Certificate

The complete raw certificate details for vds.lulumea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2328081233813503898093728090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 10:26:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-29 10:26:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LULU GROUP INTERNATIONAL - SOLE PROPRIETORSHIP L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vds.lulumea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790378383501892135892564365101405095523960051018305007866456803056293360862517580367131092229255809327281783708511697525116092076134731397172255372710654821925176738027704699756055292431765107074866045616192923950229218832092986426173781254551535223379740767631062868828535800012224911119209695274775670136389924755743809342850555950538102219264004156700499851627791815672652651319555286384879826075226471327748508874559117918999439056170266164601154924926409702873910448593493236892487445108359262654557994364306349255160624583251642802141833975366903799409614118388166915789805034117749367459396548817588785430209495950271597810786921570552319946729454669934833603145606684391939205662975351105822202152472905265231942295660191129771920019277824364715027559168797067100488685741755539605706928775340605178845040275828907790749183209880868193131119185699055135121934822941280131986057343642977014813472859776344814704272073142864842812854047348767251828185853965266044417929798229499265378550529906907184848668045201725462115042643620223716595178200346123146742704838785988138492900966083188837147594687968562711290980760238484671254708863264463104562583760474284976832524048593393766608747264535063225109775062511787378686126184491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vds.lulumea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a72d5fb5c2d776e0659aa96076a67f3b6909bf82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ed71bff7d216caed81a3fb5374437d0479dda36f25b208b45e99a707786b58e8524094ef543892ea7a8f16d1d6b3fe8e9c43358a778d440efc94033dc9b307086116e0128104ee4585dfadb9ac050cb992946565080b379a608430b644738a41dd5f82c38251112bc9301c2627ece4ca0056ce5b179dc2ef2ebc680ade8e8e719cc949edd9d1102f2232e8defccc7b9dc3526f5f8fe0fe8064fc961bdc32237b65bc3d4e1b8c2ecbd03e4edcec0947174ab86af1f729d9fa01179655e128d2cd46dc1ae67def847ea15a0392e3ba62213a2c4aedcafc3f14ff8e80ed293aa40660bde97702cd4c8c0bc81bdda5469da6cc8e149ff2f7512d6293ff8aa2bd62b