www.pyroteam-duesseldorf.de

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0c:65:9a:f6:a7:03:a5:56:ad:ec:27:55:cd:fa:a4:d4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pyroteam-duesseldorf.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:65:9a:f6:a7:03:a5:56:ad:ec:27:55:cd:fa:a4:d4
Serial Number (int): 16478300965026353138645170048716154068
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:2a:e7:e1:5e:56:c3:39:11:85:a6:48:d2:08:9a:55:21:d6:17:a3
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 7d:36:0c:2a:de:53:d3:81:54:d0:27:12:1b:93:d6:d5:2a:23:53:85
Fingerprint (sha256): 05:3a:80:b1:23:e8:7a:2c:c7:c2:39:72:3b:c8:13:6f:e6:6d:56:9c:28:a3:55:37:ac:f2:9a:fe:65:ef:b2:28

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.pyroteam-duesseldorf.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pyroteam-duesseldorf.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pyroteam-duesseldorf.de
pyroteam-duesseldorf.de

Other certificates including the domain name pyroteam-duesseldorf.de

(limited to 100 certificates)
www.pyroteam-duesseldorf.de
sni.cloudflaressl.com
connect.guildhall.ro
connect.network-consulting.eu
store.pyroteam-duesseldorf.de
connect.feelserv.net
connect.network-consulting.eu
connect.network-consulting.eu
connect.rgjb.nl
connect.network-consulting.eu
connect.wearemhabitat.com
connect.hardingsurveyors.co.uk
connect.ischebeck-group.com
www.pyroteam-duesseldorf.de
pyroteam-duesseldorf.de
connect.millson.co.uk
connect.pyroteam-duesseldorf.de
pyroteam-duesseldorf.de
connect.network-consulting.eu
zohoconnect.sedna.de
www.pyroteam-duesseldorf.de
shop.pyroteam-duesseldorf.de
www.pyroteam-duesseldorf.de
connect.network-consulting.eu
www.pyroteam-duesseldorf.de
connect.hanspunt.be
connect.fdit.co.uk
connect.network-consulting.eu
shop.pyroteam-duesseldorf.de
pyroteam-duesseldorf.de
www.pyroteam-duesseldorf.de
pyroteam-duesseldorf.de
smarturl.pyroteam-duesseldorf.de
connect.etb-ag.com
www.pyroteam-duesseldorf.de
connect.ktkvirtualsolutions.net
connect.network-consulting.eu
connect.zep18.com
connect.network-consulting.eu
connect.bitsnbites.net
networking.ikourox.ventures
connect.sweet-move.com
pyroteam-duesseldorf.de
store.pyroteam-duesseldorf.de
connect.network-consulting.eu
connect.brightsentinel.com
connect.cropredybridge.com
sni.cloudflaressl.com
community.quanta.com
connect.network-consulting.eu
connect.network-consulting.eu
connect.network-consulting.eu
partenaires.numsquare.fr
partner.psicologia.io
connect.network-consulting.eu
connect.myllorca.expert
connect.twin-gmbh.de
intranet.ecocre.it
www.pyroteam-duesseldorf.de
connect.spektrum.consulting
portal.privacymatters.mt

Certificate

The complete raw certificate details for www.pyroteam-duesseldorf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s45YJMR4uWh7blfl0Dg
7cUUA3I27YvOYYnvvKRk5AHhDzX6azb/shMO47f+Kg7EZzMmb0/8MpyQkX97prsD
inrirtkI4kvuRAaNmLv/P8yhOPDu5qdH+oIjASeQaPY/PLxWmJ3N9Ynz2RYWw9GY
GYHtz7TM4LVZDyNe2XuCqroXxlnY3KRQyCGF8NmVckArbF02xm6VInKqf8ba4ISY
4g9pxF3+WzBnFCKIElrGjWtnwHaTgujN1SBNetsR69oDRPg+7LaplXtWfB2nD/at
DrhyFiBLAcMj8jQyFVeNNuboRgBtQBTC3EWmSM/nzDrI5NSiapnYFyjHtLIb06lv
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16478300965026353138645170048716154068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pyroteam-duesseldorf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27116690171317018459312271021158393699162587153831051646607791486645092840165400913858901060690686561072742954548429671325268602248707331865040210894174827420871632720075008752593963845880347924758901549897425596339789399615732843565869514626307503137848397068274911573377335240549898425548281375618434064844516349073496904000264958908368186092977979915394955053672913137573970862904821286580971738609297893235737605075323145784178246732746204927935651319940174656241806190419994802158914947975497340835176411667573178693071177200371905788253580859319438121277595629638629495690541396257964384652314180366705514606363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d02ae7e15e56c3391185a648d2089a5521d617a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pyroteam-duesseldorf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyroteam-duesseldorf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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