escaide.eu

- ECDC -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0c:98:79:5d:fe:8a:54:a0:38:b1:01:bf was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ECDC

Organization: ECDC
Organization unit: ICT Infrastructure
State / Province: Stockholms län
Locality: Solna
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:98:79:5d:fe:8a:54:a0:38:b1:01:bf
Serial Number (int): 3898149982670756020854260159
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: d5:5a:92:6b:94:ae:82:1b:43:12:a0:b0:22:d0:0a:8b:27:13:37:c7
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): d5:59:c7:20:dd:39:ce:25:1f:a5:1f:6c:30:76:8e:80:cc:2d:e9:cc
Fingerprint (sha256): fd:b2:37:3b:92:e3:d3:93:8d:39:b5:82:3c:18:46:c5:78:82:c8:5b:a3:7b:c3:8a:c2:42:a6:c6:7e:10:fd:89

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate escaide.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for escaide.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

escaide.eu
www.escaide.eu

Other certificates including the domain name escaide.eu

(limited to 100 certificates)
ecdc.europa.eu
*.escaide.eu
*.escaide.eu
escaide.eu
*.escaide.eu
*.escaide.eu
ecdc.europa.eu
*.escaide.eu
escaide.eu
escaide.eu
*.escaide.eu
ecdc.europa.eu
ecdc.europa.eu
ecdc.europa.eu
*.escaide.eu
*.escaide.eu
*.escaide.eu
ecdc.europa.eu
escaide.eu

Certificate

The complete raw certificate details for escaide.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3898149982670756020854260159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-05 16:32:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 16:32:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stockholms län'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Solna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ECDC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'escaide.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845657384673602232434156781359307525080945705748173099426570970502232410958622550874053331439942783568454217001014987523988670024537878584264589121077580983050203633860933064225192821526156818662150118541939396929566572009669063522953828327809263340450288775608302762190897268685649684705717946014914477223647079146856327603698948439708815088114307077183127348919651883147026127544481443807373358175843348184089608926416493347816348113059127816839090186051166256963291621474369254822430470459355841814514059717975924273633544067257534101450047699331679403692677611055418005791255955986734690391870676868579384608470596605991789907256045621060907785791398719113089095874379976397282383660039037993653098051514810269548203901732431122657260514355571892696868825942675833514147496677683525671047433531588854836885902601126245973457463056772645829009107586706969323182106093223345904841836596518536218046822916464503156945470032035376290294607961278276725241295317718625420386432758870408264720952967837479661422390497114737274869355813927313802660153331564448682782767282604592812672002947279204717484259771556361346060337837780109098488581543511225461866588664089455312986199280051954604260230767779243137901720678705261541805241214707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escaide.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escaide.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d55a926b94ae821b4312a0b022d00a8b271337c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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