DV SSL/TLS Certificate for www.rma-mn.org

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020)

About the www.rma-mn.org DV SSL/TLS Certificate

This certificate with serial number 61:eb:cc:d3:69:e8:5c:74:fd:a4:6c:27 for www.rma-mn.org was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.rma-mn.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 61:eb:cc:d3:69:e8:5c:74:fd:a4:6c:27
Serial Number (int): 30305110782936865708819377191
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: f8:4d:75:d6:c8:42:97:6b:d4:7a:1c:37:aa:39:68:d1:fd:d8:92:00
Authority Key Identifier: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (SHA-1): 2d:76:0d:fd:c9:42:88:6e:f4:d4:a9:3e:f4:61:ec:d0:5d:f4:5f:22
Fingerprint (SHA-256): 8d:97:d3:46:47:69:11:48:12:b9:e7:a1:3d:91:d7:88:ef:27:96:cc:26:f5:63:27:f8:82:27:1d:3e:39:f1:42

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.rma-mn.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.rma-mn.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.rma-mn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgsudKAkT5O6qb+np1at
Ie0WCx9lmtrvYHg/+UmBIQCZl/wqIZT8xu9tOEeFrvjrxExGqYVVWMgC0j51AaeR
UtSCbUND3t5SJWihZ1O9jvGO+w6kdLHEX99kGSds2ABz59DJfDdtwl4dru0tWfe7
3+k6YrOkmESo11nyH/p+dZ2AlsaJf31nrEW1LcniGoPpKGT2AiROJmr6zZXt3Vfe
TfU241xEfPYzzi7u/v3dymkoyHMG+VLd54l9ME1YHOxtupdDQpCQSHye2PY79cdn
mAanTDH0bPwrPzwygr9DGQZ+dTq7OHAwTKVAhksYGhIBMY8Lzz6klxQpKTr5WMjc
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30305110782936865708819377191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-27 09:14:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-28 09:14:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rma-mn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26010604609919346347392671148900037837222296697251020217990958427355432453233185042166718919187428053397112285674180960945617970305811091542959665860256681757428166861081534647029481087358051216582606589957644067890687224695614511077466849107770468513762320423152117939044419059376812002060758179487868006437178381504502097871952308832453186714250340497333623374528305573354428157098690400861397005678747034916392770812183241261075886500354948984202685505526314553249819419052965367816243967072819883140912012389095958821737629855162690303021677876940728441127447882516126275859300301453753959790760115500576726899891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rma-mn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rma-mn.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f84d75d6c842976bd47a1c37aa3968d1fdd89200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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