*.viversum.de

- Viversum GmbH -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:f0:ab:e9:b4:1c:00:28:34:c4:6d:21:07:35:09:29 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viversum GmbH

Organization: Viversum GmbH
Organization unit: IT Department
State / Province: Bayern
Locality: Nürnberg
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f0:ab:e9:b4:1c:00:28:34:c4:6d:21:07:35:09:29
Serial Number (int): 3908094045563433068351456425048082729
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: da:cb:6f:ba:23:8b:1a:05:96:3c:9c:07:52:e6:6c:58:cf:fc:c2:dd
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 26:b4:eb:fc:cc:5f:00:a8:55:02:e8:03:8f:09:9e:70:d7:e5:12:ae
Fingerprint (sha256): 0a:57:d9:7e:b5:57:df:ba:91:1c:5a:e0:d7:c7:b1:2d:8e:b5:f2:d5:13:af:f5:22:bb:8c:8c:e8:09:53:47:e6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.viversum.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.viversum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.viversum.de
viversum.de

Other certificates including the domain name viversum.de

(limited to 100 certificates)
www.viversum.de
trck.viversum.de
*.viversum.de
astrowoche.viversum.de
ssl810159.cloudflaressl.com
trck.viversum.de
*.viversum.de
dev.viversum.de
ssl02.viversum.de
*.viversum.de
trck.viversum.de
news.viversum.de
trck.viversum.de
lp.viversum.de
lp.viversum.de
viversum.de
www.viversum.de
api.viversum.de
dev.viversum.de
*.viversum.de
trck.viversum.de
beratung.viversum.de
beraterportal.viversum.de
trck.viversum.de
lp.viversum.de
trck.viversum.de
*.viversum.de
viversum.de
dev.viversum.de
www.viversum.de
vivcdn.com
api.viversum.de
ssl02.viversum.de
trck.viversum.de
trck.viversum.de
*.viversum.de
www.viversum.de
trck.viversum.de
vivcdn.com
ssl02.viversum.de
*.viversum.de
viversum.de
www.viversum.de
api.viversum.de
www.viversum.de
www.viversum.de
viversum.de
trck.viversum.de
viversum.de
trck.viversum.de
www.viversum.de
beta.viversum.de
adventskalender.viversum.de
viversum.de
trck.viversum.de
adventskalender.viversum.de
trck.viversum.de
ssl02.viversum.de
beta.auramind.fr
stage.viversum.de
www.viversum.de
viversum.de
www.viversum.de
lp.viversum.de
ssl810158.cloudflaressl.com
beta.auramind.fr
trck.viversum.de
ssl02.viversum.de
trck.viversum.de
*.viversum.de
*.viversum.de
stage.viversum.de
www.viversum.de
*.viversum.de
media.viversum.de

Certificate

The complete raw certificate details for *.viversum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3908094045563433068351456425048082729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nürnberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viversum GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.viversum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735742298625957851322736162830560760448289941855708692389521444843876751645665115323877272732625079372175645397936720093229685247015746386931871825250887558948494808609310504596230287628722533931822587357743957633027799460472953757619727318602203818785380911062732795802730714685611424798983566687617960315552993511549221756721187774800955617580672166728903809058464127876232125875991318220335162721767223856867849859057507152648163256050908413444728501784081857330377408787405236487877532289704858870730456159462035343810748156408767842964521151436207481180124424097373555129754544085182852749248499880605821769297034629479172341607757517374672107084304470878435236359146005357346981314661004774725865927189205375292409430093494410831778144793290723958218365520808652772546158825656992190706014484444648304740829702554552231829439756196294415794470622024435793514009285128916967876527239030599486892578086183442146081171899504880909161639822433348135266114540131860608128875607044614636477650766787611315056455443777118812316872017867267533138201187987577170520655664462042858056690443592701474050648956507991779539927418305387260266130699431567881302127196581335278712390807981817359188051360628915803852518277657024897277036025581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dacb6fba238b1a05963c9c0752e66c58cffcc2dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viversum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viversum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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