salama.itc.gov.ae

- Department of Government Enablement -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 2d:16:95:22:af:72:5c:ab:8d:92:b1:1e was issued on by GlobalSign nv-sa.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Department of Government Enablement

Organization: Department of Government Enablement
State / Province: Abu Dhabi
Locality: Abu Dhabi
Country: AE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 2d:16:95:22:af:72:5c:ab:8d:92:b1:1e
Serial Number (int): 13954126082429565013587046686
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 25:d3:af:ca:4b:9b:14:35:70:df:09:d9:40:af:16:df:4d:d2:42:d1
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): c8:a8:c7:0a:de:51:da:52:30:12:1e:65:06:3b:d0:7d:e3:0e:5c:48
Fingerprint (sha256): f3:88:7e:31:46:e2:7e:aa:92:86:e1:ce:5c:54:28:88:63:40:f5:d6:49:17:81:ce:69:ca:21:5e:f5:38:16:43

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate salama.itc.gov.ae

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for salama.itc.gov.ae

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

salama.itc.gov.ae
salama-admin.itc.gov.ae
salama-driver.itc.gov.ae
salama-asset.itc.gov.ae
salama-gateway.itc.gov.ae
salama-gis.itc.gov.ae
salama-par.itc.gov.ae
salama-core.itc.gov.ae
salama-api.itc.gov.ae
salama-sup.itc.gov.ae

Other certificates including the domain name itc.gov.ae

(limited to 100 certificates)

Certificate

The complete raw certificate details for salama.itc.gov.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13954126082429565013587046686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 12:26:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-16 12:26:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Government Enablement'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salama.itc.gov.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833780959029295434045382946254959716228437680881153613571404258797708037820539951620328354835385468881026846983834318116326236283384986151769279782172990567559764222976116327513638712972631797889879319853789720532842448625343991141585635760974311782528315722101118845991827633293280773579471040370218556963701528762436516979704376462384248308333593904389513155215540518370566857096393540483730079286977214935927851607104982525818657185478082730722786311480705172359427799612930423391499247115787363650858576141733338344921585904126763525372746096550764569653005503714737665075613137039549544388120914818325469807933634568512596872380450098756783245653294580534009629057702469231726445682442289516100571030901727373164354386118519562618608209648443699256675105162688302067770092633349342724765476641601261313961488630038231570834744576987275300644608919100447892341067118480273293488624164484511534246283361657909626118310706289572509319995470189291242118320280141627694170380410130776084144331686052970180672288626963059960539224157807777093428287663205016535389632355808776763994020762672169406079993221773661000513722344411884430735345812754796541524694231297155766393679038721235246389041543528818149352701370830705998864948534247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-admin.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-driver.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-asset.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-gateway.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-gis.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-par.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-core.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-api.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salama-sup.itc.gov.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25d3afca4b9b143570df09d940af16df4dd242d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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