weblogin.frontdata.dk

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 43:b9:d8:9e:1a:03:35:f8:50:ea:52:bc was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=weblogin.frontdata.dk,OU=Domain Control Validated,C=DK

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 43:b9:d8:9e:1a:03:35:f8:50:ea:52:bc
Serial Number (int): 20960169882279090701898240700
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 80:68:1b:d3:83:90:c5:16:00:75:16:06:12:51:d4:0d:f1:fb:39:d6
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 6f:48:e9:cf:5b:02:66:6e:4f:fe:f9:c5:5e:59:8d:0e:74:5c:9e:43
Fingerprint (sha256): f5:64:82:4c:2c:14:b2:22:9d:ab:5a:de:0c:b1:12:aa:e6:76:96:d6:43:a7:1a:2d:ea:10:19:38:a7:e8:df:61

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate weblogin.frontdata.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weblogin.frontdata.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

weblogin.frontdata.dk

Other certificates including the domain name frontdata.dk

(limited to 100 certificates)
sts09.frontdata.dk
login.fd02.frontdata.dk
Mailsecurity-rel1.frontdata.dk
fep.lync01.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
sip.itrelation.dk
fep.lync01.frontdata.dk
Sip.lync.frontdata.dk
*.frontdata.dk
www.frontdata.dk
weblogin.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
www.frontdata.dk
ssl.front-data.dk
cas.frontdata.dk
cas.frontdata.dk
weblogin.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
weblogin.frontdata.dk
login.fd09.frontdata.dk
vpn.frontdata.dk
soc.frontdata.dk
login.fd09.frontdata.dk
internet.fd09.frontdata.dk
weblogin.frontdata.dk
Sip.lync.frontdata.dk
internet.fd09.frontdata.dk
weblogin.frontdata.dk
ssl.front-data.dk
cas.frontdata.dk
weblogin.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
internet.fd09.frontdata.dk
cas.frontdata.dk
weblogin.frontdata.dk
sip.lync01.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
sts02.frontdata.dk
lyncdiscover.frontdata.dk
sip.lync01.frontdata.dk
Sip.lync.frontdata.dk
weblogin.frontdata.dk
sip.lync01.frontdata.dk
ssl.front-data.dk
sts09.frontdata.dk
cas.frontdata.dk
sts09.frontdata.dk
*.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
fep.lync01.frontdata.dk
sip.lync01.frontdata.dk
auth.fd09.frontdata.dk
login.fd09.frontdata.dk
sip.lync01.frontdata.dk
cas.frontdata.dk
soc.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
login.fd09.frontdata.dk
cas.frontdata.dk
fep.lync01.frontdata.dk
sts02.frontdata.dk
fep.lync01.frontdata.dk
cas.frontdata.dk
sip.lync2.frontdata.dk
auth.fd09.frontdata.dk
cas.frontdata.dk
ssl.front-data.dk
ssl.front-data.dk
sip.lync01.frontdata.dk
ssl.front-data.dk
soc.frontdata.dk
*.frontdata.dk
login.adm.frontdata.dk
soc.frontdata.dk
internet.fd09.frontdata.dk
fep.lync01.frontdata.dk
sts09.frontdata.dk
cas.frontdata.dk
vpn.frontdata.dk
weblogin.frontdata.dk
cas.frontdata.dk
cas.frontdata.dk
login.adm.frontdata.dk
weblogin.frontdata.dk
*.frontdata.dk
www.frontdata.dk

Certificate

The complete raw certificate details for weblogin.frontdata.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24jI2ftW8X0mPidQnkMK
V4TFN02RLXeaz9FS6/5RVdpUqTr7h/bJ1zDtzYusxRMEYDFGiAgbjcewPY+TjzYJ
KLbS9MQf0MaNqg/EluDc+PwJVsFmxZeUzGffgU7BUw4S8riZx/a9fhMYr5NzPR8p
8OoQAp85BUpdPNy20/YgxeL3Moz33rTavfpHI5PtcElvkgZNG0AbDUEL0ERULbLN
3DD98G96zXysYLgKh9kH5Pa+KGCkuIA8h7bM0JmwMwTxVwNLRWwpQ+cZTjeFAHk7
y74IHAnhf941LmB7qS+ffrMD0EWwPGhPbtPg8k+PE/RR3F6HpJpKYWBz3tmKwJ+X
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20960169882279090701898240700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 10:47:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 17:37:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weblogin.frontdata.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27713639775993368098546387588230309861422532248059360395292540325115934412498902713353711361548596459726382876626514645396995538418151483849440420623619970290011328409414221772020296174800354546117638495627921447000315625858129857357964908163744069313421422758701924662453098819921263567200514572685939310657401226159393205438330625525144395161452676851275184101184832711493888481195458386648763466369695315763736490833981823652862579731220721479412012275589414305438500943172477253236839784057479107745158496721603273573230255273760985835775287580005181398562934425765142428504641394379951493155905260891571702699893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblogin.frontdata.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80681bd38390c516007516061251d40df1fb39d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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