www.ellener-dorfmusik.de

Issued by Secure Site Starter DV SSL CA - G2

About this certificate

This digital certificate with serial number 08:6e:b9:33:fa:5b:0c:6d:57:9d:72:e0:ff:ce:a5:1d was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.ellener-dorfmusik.de

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:6e:b9:33:fa:5b:0c:6d:57:9d:72:e0:ff:ce:a5:1d
Serial Number (int): 11208732984612445199205884060196840733
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9b:54:ad:df:69:60:ea:70:42:6e:e8:2e:c7:14:7e:88:ff:b9:44:99

Fingerprint (sha1): df:ba:16:17:87:0a:35:e5:11:d0:34:a5:d8:57:20:24:b7:2d:24:ea
Fingerprint (sha256): 04:4b:61:8a:bd:de:94:be:c4:22:f3:d9:84:a0:a9:c0:f5:89:10:0c:ba:c4:fe:07:03:9b:cc:fa:dd:a9:64:8b

Issuing Certificate URL: http://ha.symcb.com/ha.crt

Revocation information

OCSP Server: http://ha.symcd.com

Check the revocation status for certificate www.ellener-dorfmusik.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ellener-dorfmusik.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ellener-dorfmusik.de
ellener-dorfmusik.de

Other certificates including the domain name ellener-dorfmusik.de

(limited to 100 certificates)
www.ellener-dorfmusik.de
www.ellener-dorfmusik.de
*.ellener-dorfmusik.de
*.ellener-dorfmusik.de
*.ellener-dorfmusik.de
*.ellener-dorfmusik.de
www.ellener-dorfmusik.de

Certificate

The complete raw certificate details for www.ellener-dorfmusik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIT64xSpyWlgNr7HrhMm
9kGa/nwgan9JCwUvaHM98mctGnVvG5ht6FR2Q66LhnmKdIqFmNLZKYVdF0B+6+NV
yvqGASfwyinoDdNKiL2T3tqf0iibRDu9iSrpUVbF7x0Vss6FIYg2nDM2lzeJDh1F
mV2Hd5HEGCTHKuPp2PD/FLSH7Xn3Cu0dZE3Vy4/dOgwgYkMF3ARBtOe0YAYi9NCN
7fgqoxQ9ArzalRCahRcHwcG6Qtp7mxfHVaj2UfLuFneFCM8/Z2v81VWwI7f7x561
cop2ZsdUWmAmD7piPrsNzq4OA6ygmqCexEUMQrE0Lk9jactfFc6HYiN4BZl4p0+t
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11208732984612445199205884060196840733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Site Starter DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ellener-dorfmusik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20263703690127988026980698102036218707681468603869643639496402502474605134262177613325423946320762433880061088184492362551179609197068467460797375992763883304121453050414409451169172539425547573831758860499662973277494621200666373653760965275530792013583984336769484973159160123700564384483744034422307042381525090396087918157199294584978371867471987961214333228294257484843897128702634824494170464556926989913372829540409294940869166194460683738720993601767151842411836973187143221471500350183639274467183300255228134579624468100288434681085662167974238814247952878254342190604622428321581403576037082896215982452057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellener-dorfmusik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellener-dorfmusik.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9b54addf6960ea70426ee82ec7147e88ffb94499
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ha.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ha.symcb.com/ha.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000156526bd8930000040300483046022100bccdf61010a0f8e541bdbdc7dcb03099557ade8e7382907b50410426af5bceda022100f17d6f63e1ea5b0af4aefd728b5e8bbab9365a7f7a5d0006de9a5525b0c11846007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000156526bd8d50000040300473045022100bea21f464537cefe39eff3b2573c92c55c878eb8fc2b2590bd313cde3e128273022067dc8b0592c9c5ffe888c07a3d08552c98687b29d65e933f2501d0a048eee1a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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