www.glasman.fr

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 55:1c:dc:81:9a:2e:34:c8:dc:da:c5:25:2e:ee:69:02 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.glasman.fr

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:1c:dc:81:9a:2e:34:c8:dc:da:c5:25:2e:ee:69:02
Serial Number (int): 113134236352019143446524858469373077762
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 40:2a:cd:ca:a6:a0:0b:0c:3d:d7:c0:2d:a2:4e:e0:2c:98:0e:f3:c3
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 90:62:de:8b:bd:7b:be:0a:47:ec:51:e3:84:44:36:ab:93:ce:fd:76
Fingerprint (sha256): f3:f0:47:ef:c5:29:56:52:f6:42:cf:f9:85:66:29:02:e0:7b:de:e6:17:84:f6:96:c7:d4:dc:62:15:69:e1:99

Issuing Certificate URL: http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcomRSASSLsubCA.crl

Check the revocation status for certificate www.glasman.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.glasman.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.glasman.fr
glasman.fr

Other certificates including the domain name glasman.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.glasman.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63/rO5i62jORkf+ZSAhH
f8dchXDojFIApcKGxcs6fslB6Ag+PYCMqf6/OT+dxUhAFs2R3i+gM4vBkkA/lxRy
vR4eGmNE9hohdKXu6K6UUjQxrpkU+JhvWRYTfPiQVVW6yjFpvkdSGc2IuLSenyRH
nIzJhdzJuKqe9vyVdwdhomWs/umffWED0b0HpMotgE7TqTP+/ndguh8Ni/zqOnuP
ut081QBB00g3Hpti5lGTOvTN9JAzCZSIQme+F2LxREQVAGMPnbiB3uzQ22esskk+
XvCTTskA5Ifn0xBf98sLKk9PN8CbTMlfg74NZUYQXuAoF4huG3hb5Rzb6iSue+d+
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113134236352019143446524858469373077762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 12:03:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-14 12:03:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.glasman.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29729080816817826168526030864753913457412550699274840543572455429601071026536052265476048347795140999748838579376837430935542334135365362203162437088776663906936620434569702098603092892457005068700334462651701376637403897880336537166990278862412859545392261680104037951232516120081181922742938977510487315967190341038391311410889973950389974143851246196791554542683528926136306179919915198108912405551279948880527983635906733087096226563553835193439687137032228824016747403695957064220195919651267560815867930713498126771445860631774767556918004437019634207846496991750756087286699738646709219458510221537496736955953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glasman.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasman.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcomRSASSLsubCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							402acdcaa6a00b0c3dd7c02da24ee02c980ef3c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:0|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00246f46729ccd29958edc18e0e011dd76c5e338cb6169320cb82e8d27959d37f61567f71fd7f3730fee268c7637499c9aff38032b36c9dce1d974273cd620af002b64f59a83b5825e188a076003443e59f67b1ec71e3670aba63480e782e4dfdcbe6abb20912f5b7b5ab6547b5192badbc4fefb5138043828fccc8ea43b2a3961f3d3b48895cc9d98daa44e3d2d8d4547dbe772efa8b87079e5bf5a1c1196d6f3934ae66f31816c1513106410a7ad0eceac831085a24cbff48b6afda4b832c0f2453d2d0a3d279ddb105445c5f7a453748dfc34255b5fa73b3a9f5f0c14380651bb6aac68bf463e4de8f27d9b21079db6902ef41ef33d8bc6575ab3316551e13c7f70e171e9fb6132ff8bd4f17ee5aa805ee2ec79ebd18354555e4d75489cb54ecc2d91fc9aa66aeacde34b80fafad297829b33b2f8864a96fe1bcf55acf1039eda2f817a9223cffb80f8ded9a781c5c2d3c0f98bd2ca801cbe85368cea687bb6b4c25b815f18d0f3b67cb73a6cefe04ac4da5e6f7d1a7dd30e9f1ba45ab63771ec8cfc925f6b5e4a43dc7f4ddfcbd126c2efa74ac9e7ca769054cbe45ee33583dbf5183fe2eedf02ccd24148a058b0ab31a2268234f631669af13028e98878128b3e661728ab13a5085bf111a0d1b92dddeeab0162b6ebb0134dde67bb7785094357ffc7dae7c0fa8148d447a311aa2f485ed1b8b5500ef0cab8d5d75fad3c5e