zim-foyer.vdivde-it.de

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 2b:21:d5:77:a2:88:83:9f:1b:ae:f4:44 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zim-foyer.vdivde-it.de

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 2b:21:d5:77:a2:88:83:9f:1b:ae:f4:44
Serial Number (int): 13348758045300272274162512964
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 0f:e1:87:8f:3e:ab:b3:48:b9:a8:16:ae:80:07:3a:c6:99:bb:50:1c
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 78:6e:99:43:75:07:63:0c:e4:bb:e4:8b:45:de:3f:5a:a4:3e:7c:be
Fingerprint (sha256): 0a:e7:5e:ef:76:e8:bf:42:fd:19:9b:8a:02:f7:16:67:1b:33:ef:af:f4:b0:0f:d0:aa:d4:6f:0d:5b:36:73:1f

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate zim-foyer.vdivde-it.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zim-foyer.vdivde-it.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zim-foyer.vdivde-it.de

Other certificates including the domain name vdivde-it.de

(limited to 100 certificates)
analytics.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
nextmatch.vdivde-it.de
zim-foyer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
app01.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
transfer.vdivde-it.de
upload.vdivde-it.de
survey.vdivde-it.de
wikibzf.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
mail.vdivde-it.de
www.vdivde-it.de
bot.vdivde-it.de
vdivde-it.de
*.analytics.vdivde-it.de
upload.vdivde-it.de
stellenangebote.vdivde-it.de
transfer.vdivde-it.de
analytics.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
mail.vdivde-it.de
survey.vdivde-it.de
vcse.video.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
ssl.vdivde-it.de
vcse.video.vdivde-it.de
wikibzf.vdivde-it.de
app01.vdivde-it.de
exchange.vdivde-it.de
app02.vdivde-it.de
vdivde-it.de
stellenangebote.vdivde-it.de
upload.vdivde-it.de
www.vdivde-it.de
vcse.video.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
www.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
zim-foyer.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
bl22.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
app01.vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
ssl.vdivde-it.de
analytics.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de
www.vdivde-it.de
www.vdivde-it.de
vdivde-it.de
vdivde-it.de
app01.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
stellenangebote-intranet.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mail.vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
transfer.vdivde-it.de
ssl.vdivde-it.de
app01.vdivde-it.de
vdivde-it.de
transfer.vdivde-it.de
app11.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
upload.vdivde-it.de
mdm.vdivde-it.de
upload.vdivde-it.de
ssl.vdivde-it.de
upload.vdivde-it.de
*.vdivde-it.de

Certificate

The complete raw certificate details for zim-foyer.vdivde-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4VOPICMUx4bYr2r5N+LJ
kmii3TT3YQ2YgHtjEUEK3OR3qeuOcF/PfHsxT4f2gWb5duSz56EUKxs3zl7uO9Eq
QbdTPqtTgzJDux3CQQyOIK+ABGvangvsGuMPJ3gJJzcCuYWFDoSEyj7yZsiK1vsX
LZzzFFxWO7s6j+5hSkdtqPZHLzM9k+aMIgPYGpvUp2Oj77PB8w3iEXpyVqEvP9U8
0fe7mCZ4wx5bcfPXAmIJfyL7ERv8nrlgo30i0Hy0KlFsNy86pjJ1Lj0cnxmQR7hj
0saty+x2McEUSX/92U2rNwQsjE7t5Dzmz8+1+OL3Qh5ivu1V8vTdmaZfN9I4uZ2g
gzQ0icqYvl6Bc094BGthQt7vOWOC4xpe8hNbMAKNiDyZ7u5hqEshZ1JwP0ZxTKQL
wKCo/K+TaDPtF32ulvw+4M9HLTh/Cda3JYeL/sQ1ODQToYhU28GutPrvb205rMnv
DfwKQzYDZdnEhGBpUetsuf8dmJ5TL6cy4xD7vYyepXWaWBHwjprRHRxx9Vp5xrA7
eKL6/GPeYnGWiv8mwJJwxzTtZjGH/EbwnL2WNccNuLsbwtMTjpWq0wLGVv5CHKP5
4eS+ejrNqgp8ZpashvCZucIMV46qbQe0HRnVdmtdwlo62FOeCBqhl1nkjSJYaJfA
iQnrjIWNH+5nRVslzyBt5m0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13348758045300272274162512964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 09:29:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-12 09:29:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zim-foyer.vdivde-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919251522030577533760448705740500299775850062794380615672151683776539099558075616624585017929208043040883485774149845471506098074233064955704704342769953825371004976032362067448712488398257037308984004288756870449544761263781313365388490236526740596764749236884017217634016796173022233755363829903632196531938826072765126639394224461199927799993514427961380498727208079400224123625221987641979023800376128404949076619049797939231650310570502437500913341571038049926097498843697209428480286499994028972247601415372943201388104044839475156122317666344986970807795468619137629582046165186917245746572120116273533735904914622330827987387464028106806160130149282112550795071724883104899609554651231741527456259051417870531427435819509780019197703582031108372998361643483772617623368244150060649592658291115072850920954512231293069501002667600225985698313521548216347529848436922954698381168246245272087778520934086808358089430372355253374641004204843971169355857873449500976925646727356910031615077016742258787507710109257435681618121727494009757528773502789906787831719642305228322089664086957526085665405596196169448747257150450740793383793716846435113702859574465579413545133699949955432376069273983826452664197075938447321943090521709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zim-foyer.vdivde-it.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fe1878f3eabb348b9a816ae80073ac699bb501c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0039259a2c2e595c776dc11f6f643c82c0b1dc93327873e6d7e060fc1b85578ba277f61a6444ebf67a510c0bb3cb56cfc35ea0f4c995a613b823841c3bd930b8199c5a761e7e669221087fc5e95f1869506049927225255b9750c836111c72010b8680768b29b598e3f9cd1c8288057f4ee229183fe46667dc940fa779a7e010971521569e3ae31418ceeedc064ba3a132cf7c4466fd5e78296af99337b8d4ea447063081842a1eb7a919711648d30fcd1b092c11cbcdb126351c06372ca233552c3d9522b9c1668b56ff527d76d76e1247a854448a8882065a51cca3fca616c29619b954876d3c8635a56baf165c7e130e2275441f905d9623dcb69a0b790683d