pressedatenbank.guj.de

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:1e:e2:33:78:18:81:64:4f:d5:02:a9:f4:f8:18:2b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pressedatenbank.guj.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:e2:33:78:18:81:64:4f:d5:02:a9:f4:f8:18:2b
Serial Number (int): 4148040795485332386499729350622451755
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8d:2c:f1:2e:ab:ac:bd:3d:4e:af:cc:18:86:63:80:8c:00:94:14:b9
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 10:04:88:bd:ef:60:d9:2e:0d:de:28:b2:da:f2:ec:b8:22:bc:3f:b0
Fingerprint (sha256): 0a:4e:77:05:20:e7:d9:8a:6a:c7:ad:dd:5b:51:40:e2:b2:7d:4a:12:1c:09:2f:8a:ec:72:ce:ee:a3:ec:64:29

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate pressedatenbank.guj.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pressedatenbank.guj.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pressedatenbank.guj.de

Other certificates including the domain name guj.de

(limited to 100 certificates)
mdm0.guj.de
einkauf.guj.de
static.stern.de
static.stern.de
www.guj.digital
download.guj.de
live.video-service.aws.dig.guj.de
www.guj.de
static.stern.de
preview.adcontrol.guj.de
guj.de
einkauf.guj.de
www.stage.stern.de
*.zd.guj.de
geo-kompakt.de
pressedatenbank.guj.de
www.stage.stern.de
ci.guj.de
static.stern.de
*.guj.de
serviceportal.dpv.de
creativesolutions.guj.de
serviceportal.dpv.de
ssl.guj.de
einkauf.guj.de
www.guj.digital
*.benet.bertelsmann.com
wime.guj.de
www.stage.stern.de
www.guj.digital
www.stage.stern.de
sso.guj.de
gujvqs10.zd.guj.de
ssl.guj.de
live.video-service.aws.dig.guj.de
wiki.guj.de
greenport.guj.de
*.das-001-prod-eks2.guj.digital
static.stern.de
www.guj.digital
static.stern.de
sso.guj.de
creativesolutions.guj.de
static.stern.de
*.guj.de
static.stern.de
dps.guj.de
static.stern.de
stage.serviceportal.dpv.de
*.guj.de
serviceportal.dpv.de
www.guj.de
dev.serviceportal.dpv.de
*.mitarbeitershop.guj.de
*.video-service.aws.dig.guj.de
serviceportal.dpv.de
ci.guj.de
static.stern.de
static.stern.de
ci.guj.de
static.stern.de
rsa.guj.de
*.guj.de
sfbws.guj.de
creativesolutions.guj.de
www.stage.stern.de
static.stern.de
cloud.guj.de
ssl.guj.de
static.stern.de
static.stern.de
stage.video-service.aws.dig.guj.de
guj.de
shop.stern.de
static.stern.de
static.stern.de
www.stage.stern.de
static.stern.de
www.stage.stern.de
sso.guj.de
static.stern.de
digas.axelspringer-syndication.de
static.stern.de
int.serviceportal.dpv.de
greenprint-shop.guj.de
static.stern.de
www.stage.stern.de
static.stern.de
cmcdev.guj.de
pressedatenbank.guj.de
www.stage.stern.de
*.video-service.aws.dig.guj.de
www.stage.stern.de
*.guj.de
static.stern.de
static.stern.de
ssl.guj.de
serviceportal.dpv.de
static.stern.de
serviceportal.dpv.de

Certificate

The complete raw certificate details for pressedatenbank.guj.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN6DJ67HOPHDglp1Waq9
4I6+NDlNaEYoMpfGGAInP/yp/Clrx9icoTSu4WJ/5Qv/CdZgQYAr4lmLFtIf12vy
UhOk0yDv5M0xRV/qsC3gxz3dj6D4qV1BK9iVErdEV0L3AoaNGRIlhQRIts2MAMmL
wjpgFjoZLB5fLteOxM7z4JC3f2skTJQAsfWB2X+fVr0BbAeQCgYjrJ7Hge84cbpC
0a2HurG7FGUa3fKCLLYJyyrdkYYHe0snjNYgsqwFZMMtOpqxyB0L1OZ8yJN2aPMf
zx47LfRLPQsedeoxXqg3rLXwYiE4scOU8sIHsO/7AFDA9oeEZzxO0PA/ZTCYCjSV
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4148040795485332386499729350622451755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pressedatenbank.guj.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24852432689943922379456308847472860564826574742047643963784564486412754054079970839915443653218237453590876477633071665040561819540928211443857709501695483711922650067216606830645339825842713939227313728290663934996331053875726329063080475679980782254695798842798614560453865061765966354827805934327088268456819801908563143317509517233111737218089931250079208408454031996366896242506197477883789324400577664986934549062560151464232305359660332185755575773807745274240168435512351026414090468434218974257953434150733917250188768719498174281941664161526092185294572291472048198634821564845745992398262989438961801532713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d2cf12eabacbd3d4eafcc188663808c009414b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressedatenbank.guj.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000162be7b7462000004030047304502206a578e69272fd2aaec8ca84773e6e652cff3d4ba8e5a1712249f7e39caf8e9bf022100a3717b4076caf58cd2fc70920d33527b88124a31ca58513af4f5033d85907e7e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162be7b758c000004030047304502205e9a8577d9e7aa5eb9fafa1a887da0f75bceca5534a8acc472d02ea0d33a815602210085a7fe35726e8450301960724b94ad1531b69a9786d147cc2f3d0307db50d377007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162be7b74820000040300483046022100fd882d89a4b73b59cee79e0ac7894c408afcf95ce818e84dd1b6244ce46e309f02210089d1407b7682ebe5afc48855bf262e53f59980723e0dd3fde98db24f443d5a2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005feb0defd566462a4954e6714ebe120d600b6cd2f45163aeaf8495619bd5d1c450d1a8205c10648e0ad904a08449052d8908e3146a39eb3088da537c1580dacf1cb45aadc314a03ed52874593947fa1eb59f454dcde1ecf18f95a473c5bbd3f57e593180ef6f292906c768f297567b7e5d09ea8be7f696ba9346f7b5db104e2536954cd9518b3a0ab9e004420561e885a05de7da1fda903fb080756ead00c00592aa0e9a78177bd21be63702d8a28d670b5babfbfd36e8532748e2755c54e73566fc26758aabe818a956b56b52386c2897b2042f147d0b5fce76a7ecc60fe26509a471c2f4f72c994cdca443f910cebf0aca0ebb9334a4f2ca3af686f5eb8987