kis.kreis-mettmann.de

- Kreis Mettmann Der Landrat -

Issued by TeleSec ServerPass CA 1

About this certificate

This digital certificate with serial number 4c:ec:2a:e3:2f:77:cc:8b was issued on by T-Systems International GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kreis Mettmann Der Landrat

Organization: Kreis Mettmann Der Landrat
Organization unit: 16-4
State / Province: NRW
Locality: Mettmann
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: Trust Center Services
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:ec:2a:e3:2f:77:cc:8b
Serial Number (int): 5542852396628561035
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 4e:c5:5d:d0:87:02:bf:ec:2a:fb:62:72:7b:6c:20:bc:5e:04:4f:92
AuthorityKeyId: 33:dc:9e:96:ec:d8:e8:35:1f:6d:90:1b:0b:38:a4:af:74:1b:c6:58

Fingerprint (sha1): e1:f6:80:a1:16:e8:55:5f:bc:7c:43:22:4e:4d:38:07:06:ed:ca:a6
Fingerprint (sha256): 00:00:95:7c:21:1d:cb:9c:a4:80:15:29:2a:8d:4f:02:98:84:56:1a:95:e3:5e:63:05:16:22:cd:94:ff:30:7c

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_1.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*

Check the revocation status for certificate kis.kreis-mettmann.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kis.kreis-mettmann.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kis.kreis-mettmann.de

Other certificates including the domain name kreis-mettmann.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kis.kreis-mettmann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg0s2q4Z6i5s8cy7BWaT
uDiZQH+8ODHYm3YEMvYaF2akIwhHaQL7yGeP/pdc+fRE7PcTsq94bvcpIgQuhCdW
PNz0p9oO7Znh7vftc8bOT/acIRVBd1OpPm4mfQ19seLlmJ9sOta8HcsrrDmNPqYx
Urm2vZvWIkdnntrhZ4Jlm7jQuGwiM6GMtLRZrTCAycd9YSCzpaFeZtmms0Ged5a3
FuZodXoarQFb+CYEJZ4thhN30kJeW46e5r1HfNu3a9xircY7yrFS9oe5gp6zsf9J
NAtxP5pIaG5FlZOkW4uMUJRWQACVKozniohS/+9b2acT6YgeW3W9jFDRxnotT7n+
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5542852396628561035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Center Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TeleSec ServerPass CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-25 09:40:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kreis Mettmann Der Landrat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '16-4'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mettmann'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kis.kreis-mettmann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22476915223037925627300702705207459741924615357137541479869042734103118049504033000283775275927855369490325263222817058489936344085858534463222779758575836615597894872621656332133102749559737551351508815920742407120081026001566700158023353001603696858742819348613473326444273998907887603728617883710633367169861005217992936110753363576183972978840569970700524270185605321365719009984579613276288891130473328367504428136090201618417201927628119497139024454723822336974098204949612047344527532474234548208545773734600223551353527730152040941200297147337440501886766764711247282677388824897164858344190274258639005548257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 33dc9e96ecd8e8351f6d901b0b38a4af741bc658
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ec55dd08702bfec2afb62727b6c20bc5e044f92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kis.kreis-mettmann.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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