*.de.hub.msg.team

- msg systems AG -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 09:ca:b5:67:63:a1:7c:3e:f4:cf:ae:d3:1f:58:c9:3c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

msg systems AG

Organization: msg systems AG
State / Province: Bayern
Locality: Ismaning
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:ca:b5:67:63:a1:7c:3e:f4:cf:ae:d3:1f:58:c9:3c
Serial Number (int): 13015575234961517722724566382635698492
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:a7:b2:3a:d0:1e:34:af:70:bf:d6:d8:aa:f7:d3:ee:dd:41:6a:57
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 75:f9:01:53:ff:08:39:a3:6b:6d:f1:04:a1:dc:fd:2f:7c:d4:5d:38
Fingerprint (sha256): 0a:b1:0d:01:97:6a:1e:bf:52:c3:47:d8:78:e5:07:7c:f2:b7:3d:12:ed:58:b3:27:ec:de:a9:ca:eb:5c:8c:6e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.de.hub.msg.team

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.de.hub.msg.team

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.de.hub.msg.team
de.hub.msg.team

Other certificates including the domain name msg.team

(limited to 100 certificates)
servicecenter.msg.team
*.automotive.msg.team
*.de.hub.msg.team
*.spielwiese.msg.team
customer.gbc.msg.team
*.awsdev.msg.team
*.spielwiese.msg.team
chatx.xqt.msg.team
*.dnstest.msg.team
*.xt.msg.team
mep.gbp.msg.team
ct-dev.hub.msg.team
support.greendaisycleaningservices.co.uk
zoho.profitroom.com
vote.xt.msg.team
*.gbp.msg.team
*.rt.hub.msg.team
*.dnstest.msg.team
*.spielwiese2.msg.team
support.ethos.ltd
*.dnstest.msg.team
*.dnstest.msg.team
apps.mro.msg.team
*.spielwiese4.msg.team
*.xis.msg.team
airflow-test.zt.msg.team
*.spielwiese.msg.team
*.automotive.msg.team
*.zt.msg.team
minnosphere.com
*.dnstest.msg.team
*.spielwiese4.msg.team
*.publicsector.msg.team
operations.gba.msg.team
minnosphere.com
cd-dev.hub.msg.team
guru.msg.team
*.spielwiese2.msg.team
*.xis.msg.team
guru.msg.team
ai.msg.team
*.spielwiese2.msg.team
*.gbm.msg.team
*.gba.msg.team
*.gbg.msg.team
guru.msg.team
status.msg.team
*.ipw.gbv.msg.team
*.spielwiese3.msg.team
customer.gbc.msg.team
*.spielwiese.msg.team
*.gbl.msg.team
guru.msg.team
desk.locster.fr
aditoapi.bsm.msg.team
*.publicsector.msg.team
*.myapp11.spielwiese.msg.team
*.apps.oc2.msn.msg.team
support.42nerds.com
support.evocion.fr
*.apps.oc2.msn.msg.team
*.msg.team
guru.msg.team
customer-test.gbc.msg.team
chatx.xqt.msg.team
*.gbl.msg.team
*.demo.hds.msg.team
servicecenter.msg.team
guru.msg.team
*.spielwiese2.msg.team
support.fyooz.co.uk
tamara.msg.team
aditoapi.bsm.msg.team
minnosphere.com
zoho.profitroom.com
servicecenter.msg.team
*.gbp.msg.team
*.demo.hds.msg.team
vc-dev.hub.msg.team
training.xt.msg.team
*.demo.hds.hds.msg.team
support.xn--musikverein-grningen-2ec.de
mep.gbp.msg.team
pm-dev.hub.msg.team
guru.msg.team
*.xt.msg.team
*.xt.msg.team
*.dnstest.msg.team
support.tpc-group.com
sd-test.msg.team
*.gbp.msg.team
*.gbv.msg.team
servicecenter.msg.team
*.spielwiese2.msg.team
*.spielwiese4.msg.team
support.crmsocius.co.uk
soporte.esycontrol.com
support.bimequity.dk
*.dnstest.msg.team
minnosphere.com

Certificate

The complete raw certificate details for *.de.hub.msg.team in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13015575234961517722724566382635698492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ismaning'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'msg systems AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.de.hub.msg.team'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700544333038387680169117063106211972954602296487877237822974394787242168464252347459261720072243476872832759489144198687473479980807196747740442721233940448649807308094474744354261570243474863701534608313072431397918030557538170780468080612385894452251589560165543434335474009810660015363282492211361090659359529814006497492483720342721143972069024527338393406834779912423502478378357200464072381367092552939370490821501140195032157584808668422015645922400413658677713155122937864031944482563388921388106137332490892285459268890068065593991475548580337018749854013494466824965577691004468722774385272559272739371235202084766739019391516704753424414255395632062348525160105570774026313332373442624766004166936427539858159260252615380853200759595062472640855540042939374672230060031154428774489004490173330830742371662601495595182534392007194084340401648732028500722475834320795444871765608222744485785495768551911556908463021849905116220765832472190318694257292642026063459537143298172462200238510431891837984610132326753478704372487233799008705930966623236538054284947837537287364731810652539777779647115671421617520155952010217905470554621976161076449277709229159992752031336766642874215412643201517310705115738210847609036868006831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94a7b23ad01e34af70bfd6d8aaf7d3eedd416a57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.hub.msg.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.hub.msg.team'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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