pao.berlin.ihk.de

- Industrie- und Handelskammer zu Berlin -

Issued by Deutsche Telekom CA 6

About this certificate

This digital certificate with serial number 01:20:48 was issued on by T-Systems Enterprise Services GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Industrie- und Handelskammer zu Berlin

Organization: Industrie- und Handelskammer zu Berlin
Organization unit: Industrie- und Handelskammer
State / Province: Berlin
Locality: Berlin
Country: DE

T-Systems Enterprise Services GmbH

Organization: T-Systems Enterprise Services GmbH
Organization unit: Trust Center Deutsche Telekom
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:20:48
Serial Number (int): 73800
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 32:bb:a9:0a:36:1f:09:74:69:77:c1:b8:9a:2d:a6:de:70:7d:61:b5
AuthorityKeyId: d4:52:3c:78:8f:7e:aa:be:32:08:55:cd:b0:fd:de:bd:ab:31:7d:c4

Fingerprint (sha1): f4:4b:b6:cb:26:b8:49:c7:59:2d:bf:a2:c4:83:b8:c0:a9:03:a9:f1
Fingerprint (sha256): 08:5a:2b:43:79:9e:db:46:46:c3:9b:f0:6f:03:39:03:2f:fc:76:ad:14:28:e8:9c:e1:df:9c:cd:39:a5:49:d2


Revocation information

CRL Distribution Point: http://wwwca.telesec.de/cgi-bin/Pub_Cert/ServPass/DwnloadCRL.crl?-issuer_dn=Deutsche_Telekom_CA_6
CRL Distribution Point: ldap://ldap-serverpass.telesec.de/cn=Deutsche%20Telekom%20CA%206,ou=Trust%20Center%20Deutsche%20Telekom,o=T-Systems%20Enterprise%20Services%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*

Check the revocation status for certificate pao.berlin.ihk.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pao.berlin.ihk.de

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pao.berlin.ihk.de

Other certificates including the domain name ihk.de

(limited to 100 certificates)
cdn01.blog.ostwestfalen.ihk.de
ihkdigital.services.ihk.de
coburg.ihk.de
webmail.ihk.de
coburg.ihk.de
gemeinsam.niederrhein.ihk.de
bildung2.gfi.ihk.de
www.pruefungen.ostwestfalen.ihk.de
www.weingarten.ihk.de
events.wuerzburg.ihk.de
www.saarland.ihk.de
www.offenbach.ihk.de
ostwestfalen.ihk.de
tixxt.kiel.ihk.de
ostwestfalen.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
vdi.hannover.ihk.de
adrprintsrv.gfi.ihk.de
box.wuerzburg.ihk.de
videokonferenz.ihk.de
unternehmen.gera.ihk.de
www.going-international.ihk.de
tagesspiegel.kiosk.plus
offenbach.ihk.de
profile.ihk.de
www.vergabe.ihk.de
vstdbv3.ihk.de
vpn.heilbronn.ihk.de
seleinfo.ihk.de
videokonferenz.kassel.ihk.de
regensburg.ihk.de
ostwestfalen.ihk.de
magazine.suncoastergroup.com
proxy1.juris.ihk.de
vergabe.ihk.de
evadatenarchiv.ihk.de
ostwestfalen.ihk.de
frankfurt-main.ihk.de
berlin.ihk.de
ostwestfalen.ihk.de
xihkpilotws.gfi.ihk.de
www.hanau.ihk.de
cert.ihk.de
www.services.abnahme.usbdb.ihk.de
gemeinsam.niederrhein.ihk.de
ecofinder.ihk.de
www.unternehmen.darmstadt.ihk.de
*.webmail.ihk.de
*.gfi.ihk.de
webservices.dresden.ihk.de
nas.kiel.ihk.de
cyber.frankfurt-main.ihk.de
webservices.dresden.ihk.de
pao.berlin.ihk.de
coburg.ihk.de
impulsnetzwerk.ihk.de
ihk.de
owi.ostwestfalen.ihk.de
frankfurt-main.ihk.de
sse.cottbus.ihk.de
ausbildung.darmstadt.ihk.de
zq-digitalekompetenz.schwaben.ihk.de
magdeburg.ihk.de
wireless1.ihk.de
www.frankfurt-main.ihk.de
ausgabe.vstdbv3.ihk.de
mainau.wuerzburg.ihk.de
www.pruefungen.ostwestfalen.ihk.de
stats.ostwestfalen.ihk.de
wlan.muenchen.ihk.de
pruefung.ihk.de
*.schwaben.ihk.de
webservices.dresden.ihk.de
unternehmen.gera.ihk.de
muenchen.ihk.de
quickplace.ihk.de
cyber.frankfurt-main.ihk.de
geoinfo.ihk.de
cloud.karlsruhe.ihk.de
ihk-sh.de
bonn.ihk.de
adrprintsrv.gfi.ihk.de
www.aachen.ihk.de
dataoutputservices.gfi.ihk.de
wis.ihk.de
karlsruhe.ihk.de
veranstaltung.mittlerer-niederrhein.ihk.de
connect.darmstadt.ihk.de
ostwestfalen.ihk.de
wm.ihk.de
www.pruefungen.ostwestfalen.ihk.de
proxy1.beck.ihk.de
cert.ihk.de
cottbus.ihk.de
mx01.ihk.de
kiosk.der-kleine-georg.de
www.dresden.ihk.de
ve-register.ihk.de
traveler.konstanz.ihk.de
login3.ihk.de

Certificate

The complete raw certificate details for pao.berlin.ihk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeFxUBo5sSc830AUFHvMZc6lM7
hqhbWkeOi0/4+pLPKya/rxn6nNE7RHB4UWRXFCng5aasBKQmnzL5CI2kvbUnvRwN
hYFAyZEyH11UGRv0/ELVGzaLw/1xcnpBBC0IAxeTVdciOYLFoKIBNOQCGdkv8TuF
7/OK8lMeW5wP1SMPJQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems Enterprise Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Center Deutsche Telekom'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Telekom CA 6'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2007-10-29 11:20:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-11-02 11:20:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer zu Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrie- und Handelskammer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pao.berlin.ihk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 111014688679487416968292343283061397373916145657050350328413150940406283687610860434195565061399556957154393142908932166251990017946986654916226475731225992385190313283010455987424708430025270275951071620164717970255684809677077903461117969834463491129924803315553226578751355628592214723334583187459698528037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d4523c788f7eaabe320855cdb0fddebdab317dc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32bba90a361f09746977c1b89a2da6de707d61b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://wwwca.telesec.de/Pub_Cert/ServPass/cps/CPS_ServerPass_V34.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://wwwca.telesec.de/cgi-bin/Pub_Cert/ServPass/DwnloadCRL.crl?-issuer_dn=Deutsche_Telekom_CA_6'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap-serverpass.telesec.de/cn=Deutsche%20Telekom%20CA%206,ou=Trust%20Center%20Deutsche%20Telekom,o=T-Systems%20Enterprise%20Services%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pao.berlin.ihk.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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