{
  "source_file": "C:\\Tools\\certificat_test\\pem_bundle\\globalsign_fullchain.pem",
  "cacerts_mode": false,
  "hostname": "check-certificat",
  "generated_at": "2026-06-02T18:40:43.584983+00:00",
  "reference_date": "2038-02-01",
  "certificates": [
    {
      "type": "CERT",
      "label": "alias_1",
      "subject": "CN=*.globalsign.com,OU=PKI Services,O=GMO GlobalSign nv-sa,C=BE",
      "issuer": "CN=GMO GlobalSign nv-sa Issuing CA G5,OU=PKI Infrastructure,O=GMO GlobalSign nv-sa,C=BE",
      "serial_number": "7a59303944f3983bbcb6237336c978abacb56e53",
      "key_size": 2048,
      "key_algo": "RSA",
      "ca_flag": false,
      "signature_algorithm": "sha256WithRSA",
      "key_usage": [
        "DigitalSignature",
        "KeyEncipherment"
      ],
      "extended_key_usage": [
        "serverAuth",
        "clientAuth"
      ],
      "subject_alternative_name": {
        "dns": [
          "*.globalsign.com",
          "globalsign.com"
        ],
        "ip": [],
        "email": [],
        "uri": []
      },
      "basic_constraints": {
        "present": true,
        "ca": false
      },
      "matched": true
    },
    {
      "type": "CERT",
      "label": "alias_2",
      "subject": "CN=GMO GlobalSign nv-sa Issuing CA G5,OU=PKI Infrastructure,O=GMO GlobalSign nv-sa,C=BE",
      "issuer": "CN=GMO GlobalSign nv-sa Root CA G5,OU=Certification Authority,O=GMO GlobalSign nv-sa,C=BE",
      "serial_number": "4c1c6af986d3f1ea2ab5eb7f0ad58a38610ebf03",
      "key_size": 3072,
      "key_algo": "RSA",
      "ca_flag": true,
      "signature_algorithm": "sha256WithRSA",
      "key_usage": [
        "KeyCertSign",
        "CrlSign"
      ],
      "extended_key_usage": [],
      "subject_alternative_name": {
        "dns": [],
        "ip": [],
        "email": [],
        "uri": []
      },
      "basic_constraints": {
        "present": true,
        "ca": true,
        "path_length": 0
      },
      "matched": true
    },
    {
      "type": "CERT",
      "label": "alias_3",
      "subject": "CN=GMO GlobalSign nv-sa Root CA G5,OU=Certification Authority,O=GMO GlobalSign nv-sa,C=BE",
      "issuer": "CN=GMO GlobalSign nv-sa Root CA G5,OU=Certification Authority,O=GMO GlobalSign nv-sa,C=BE",
      "serial_number": "247787ac7b791a73411847ce3c887e885629d4e6",
      "key_size": 4096,
      "key_algo": "RSA",
      "ca_flag": true,
      "signature_algorithm": "sha256WithRSA",
      "key_usage": [],
      "extended_key_usage": [],
      "subject_alternative_name": {
        "dns": [],
        "ip": [],
        "email": [],
        "uri": []
      },
      "basic_constraints": {
        "present": true,
        "ca": true
      },
      "matched": true
    }
  ],
  "chain_alias": [
    {
      "chain": [
        "alias_1",
        "alias_2",
        "alias_3"
      ],
      "tag": ""
    },
    {
      "chain": [
        "alias_2",
        "alias_3"
      ],
      "tag": ""
    },
    {
      "chain": [
        "alias_3"
      ],
      "tag": "(root)"
    }
  ],
  "chain_serial": [
    {
      "chain": [
        "247787ac7b791a73411847ce3c887e885629d4e6"
      ],
      "tag": "(root)"
    },
    {
      "chain": [
        "4c1c6af986d3f1ea2ab5eb7f0ad58a38610ebf03",
        "247787ac7b791a73411847ce3c887e885629d4e6"
      ],
      "tag": ""
    },
    {
      "chain": [
        "7a59303944f3983bbcb6237336c978abacb56e53",
        "4c1c6af986d3f1ea2ab5eb7f0ad58a38610ebf03",
        "247787ac7b791a73411847ce3c887e885629d4e6"
      ],
      "tag": ""
    }
  ],
  "warnings": [],
  "errors": [
    "❌ Error: Certificate 1 Alias alias_1 Serial 7a59303944f3983bbcb6237336c978abacb56e53 expired 3439 days, 1 hour, 23 minutes ago.",
    "❌ Error: Certificate 2 Alias alias_2 Serial 4c1c6af986d3f1ea2ab5eb7f0ad58a38610ebf03 expired 614 days, 1 hour, 23 minutes ago."
  ],
  "action_items": [
    {
      "priority": 1,
      "severity": "CRITICAL",
      "category": "EXPIRY",
      "alias": "alias_1",
      "serial": "7a59303944f3983bbcb6237336c978abacb56e53",
      "message": "\u001b[1;31m❌ Error: Certificate 1 Alias alias_1 Serial 7a59303944f3983bbcb6237336c978abacb56e53 expired 3439 days, 1 hour, 23 minutes ago.\u001b[0m",
      "action": "Renew the certificate immediately.",
      "deadline": null,
      "cmd": "openssl genrsa -out \"globalsign_fullchain.key\" 4096\n        openssl req -new -key \"globalsign_fullchain.key\" -out \"globalsign_fullchain.csr\" -subj \"/C=BE/O=GMO GlobalSign nv-sa/OU=PKI Services/CN=*.globalsign.com/\""
    },
    {
      "priority": 1,
      "severity": "CRITICAL",
      "category": "EXPIRY",
      "alias": "alias_2",
      "serial": "4c1c6af986d3f1ea2ab5eb7f0ad58a38610ebf03",
      "message": "\u001b[1;31m❌ Error: Certificate 2 Alias alias_2 Serial 4c1c6af986d3f1ea2ab5eb7f0ad58a38610ebf03 expired 614 days, 1 hour, 23 minutes ago.\u001b[0m",
      "action": "Renew the certificate immediately.",
      "deadline": null,
      "cmd": ""
    }
  ]
}