DV SSL/TLS Certificate for reservierung.kaiserhof-siegburg.de

Certificate is witin its validity period

Issued by DigiCert Inc (RapidSSL TLS RSA CA G1)

About the reservierung.kaiserhof-siegburg.de DV SSL/TLS Certificate

This certificate with serial number 03:13:38:2b:7f:7b:47:34:c0:5f:f3:46:77:b0:3d:a4 for reservierung.kaiserhof-siegburg.de was issued on by DigiCert Inc.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for reservierung.kaiserhof-siegburg.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 03:13:38:2b:7f:7b:47:34:c0:5f:f3:46:77:b0:3d:a4
Serial Number (int): 4087476888869332334800222535851982244
Serial Number Length: 122 bits, 16 octets

Subject Key Identifier: 61:fb:81:f6:d1:dd:80:eb:57:8d:82:0c:5b:3e:5b:b5:02:b9:00:1c
Authority Key Identifier: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (SHA-1): 67:88:8e:25:19:17:d3:d4:96:c5:70:06:32:2b:11:c7:40:45:f8:bd
Fingerprint (SHA-256): 58:27:af:3e:ff:d6:52:02:76:1f:7a:de:85:82:03:42:49:07:5e:cb:fc:21:bc:56:15:42:22:ed:d2:92:05:3b

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate reservierung.kaiserhof-siegburg.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for reservierung.kaiserhof-siegburg.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for reservierung.kaiserhof-siegburg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4087476888869332334800222535851982244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reservierung.kaiserhof-siegburg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860088046369769204475244226054437566623636038108487362174055866737835215150995433389217445053066457713627797792983942509445364311321077520188168798829744942249789442438169097040212880532259626388960541169626972584373539056881532391983153418789243527612633157646011562067643801743094476585410220685279586200712403153327395026196824930482264060303562366198260225999255467674880525656955070530802243310363008876478369720362099118299339078995665926046307135305028487224880373034024012762365870409411234964632537384428560992071999604149053328718484106541506381306932443622519606361433165446889759183621692620306771971728578091767208814947629447785971536127494101932957454118702362578102998752000435968514677312208428384617148761742362737197366725330466698670761792218892961385581652697526438050119064515598160051406307410578823448461368765037439558464085679057706656296200093047141866568438723715277978732433926097445211170788916678134091398042947802436009441903679768565112081715329305072478823183092556262305354651810858999278296924682854227631431378081445326137002480245737416556403483461071324015387124696207610600415169512707871038720630320307540356177623235247938621515753165141135665305872532449831754396506955113366512612015581741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61fb81f6d1dd80eb578d820c5b3e5bb502b9001c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservierung.kaiserhof-siegburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reservierung.kaiserhof-siegburg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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