www.imk.fraunhofer.de

- Fraunhofer -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 05:d3:b2:80:35:df:31:1e:67:16:85:4a:d4:a6:cc:58 was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fraunhofer

Organization: Fraunhofer
State / Province: Bayern
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 05:d3:b2:80:35:df:31:1e:67:16:85:4a:d4:a6:cc:58
Serial Number (int): 7745335042862207752403249575332596824
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b2:2f:10:17:53:31:bb:31:47:ce:34:d1:72:1a:da:cc:0d:5b:99:e5
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): db:5e:41:24:3d:68:58:13:fe:86:af:bd:87:3d:4d:82:c2:be:1e:c2
Fingerprint (sha256): 0b:3c:7d:dd:7b:cd:61:b6:26:d4:06:95:72:f6:14:ad:eb:de:65:da:52:38:a2:0c:01:98:3e:b8:a1:9a:ca:0c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.imk.fraunhofer.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.imk.fraunhofer.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.imk.fraunhofer.de
imk.fhg.de
imk.fraunhofer.de
www.imk.fhg.de

Other certificates including the domain name fraunhofer.de

(limited to 100 certificates)
vhfraqototcs03.hec.fraunhofer.de
guest.mevis.fraunhofer.de
hmi-umfrage.iao.fraunhofer.de
www.iitb.fraunhofer.de
igb-bitwarden.igb.fraunhofer.de
wnlab.hhi.fraunhofer.de
webmail.fit.fraunhofer.de
nm-service.iais.fraunhofer.de
exilligare.iao.fraunhofer.de
bscw.izb.fraunhofer.de
applik-idz08.iee.fraunhofer.de
immufw-m.imm.fraunhofer.de
social.izm.fraunhofer.de
vceg.hhi.fraunhofer.de
vpn-gaeste-hh.ime.fraunhofer.de
netman.ipk.fraunhofer.de
www.umsicht-suro.fraunhofer.de
llcs-vi2.sit.fraunhofer.de
netsight.ise.fraunhofer.de
guest-lan2.zv.fraunhofer.de
vergabe-mks180.iese.fraunhofer.de
maverick.iao.fraunhofer.de
www.vision.fraunhofer.de
spitzentreffen.edu.cell.vfk.fraunhofer.de
kaa.iais.fraunhofer.de
vpn.fep.fraunhofer.de
iwu.crm.fraunhofer.de
tls1.ws.fraunhofer.de
filedirector.imw.fraunhofer.de
blockchain-europe.iml.fraunhofer.de
sharepoint.sit.fraunhofer.de
muc-gv-dna.aisec.fraunhofer.de
issues.mevis.fraunhofer.de
ksi.scai.fraunhofer.de
iwes-spoke-pri.intra.fraunhofer.de
pwsafe01.iis.fhg.de
applik-idz21.iee.fraunhofer.de
vpn.idmt.fraunhofer.de
vdi.izfp.fraunhofer.de
vindex.fit.fraunhofer.de
ivv-dd.list.fraunhofer.de
nettools.igd.fraunhofer.de
cq-publish2.ws.fraunhofer.de
projekte-lfs.iff.fraunhofer.de
ipa-uipath140.ipa.fraunhofer.de
humit.fit.fraunhofer.de
iap.list.fraunhofer.de
listsrv03.fraunhofer.de
status.arb.fhr.fraunhofer.de
vhfraqototaw01.hec.fraunhofer.de
keepass.iosb.fraunhofer.de
xcom.isst.fraunhofer.de
mellon.hhi.fraunhofer.de
maestral.fit.fraunhofer.de
cryptshare.fraunhofer.de
zerobin.sit.fraunhofer.de
aem-www.iese.fraunhofer.de
wqtool.igd.fraunhofer.de
vhfraqototwslb.hec.fraunhofer.de
mailn2.iis.fhg.de
vgw.iis.fraunhofer.de
subdepot.mevis.fraunhofer.de
wpa.emi.fraunhofer.de
www.isc.fraunhofer.de
blockchainlab-git.ipk.fraunhofer.de
www.aachen.fraunhofer.de
test.servicedesk.fraunhofer.de
gordian.ipa.fraunhofer.de
ildmz55.idmt.fhg.de
talentix.iml.fraunhofer.de
exim2.iao.fraunhofer.de
pathme.scai.fraunhofer.de
www.subi2ma.fraunhofer.de
vpn-gaeste.iosb-ast.fraunhofer.de
fener-webport.ise.fraunhofer.de
upload.c.fraunhofer.de
h2t.intern.ise.fraunhofer.de
ldap.ibmt.fraunhofer.de
piwik.ipk.fraunhofer.de
gitlab-i.eas.iis.fraunhofer.de
reaalmarketplace.universaal.info
kub001.iao.fraunhofer.de
download.scai.fraunhofer.de
openproject.sit.fraunhofer.de
helpdesk.imw.fraunhofer.de
data-h2t-el.ise.fraunhofer.de
ipib.ci.moez.fraunhofer.de
vpn.s.c.fraunhofer.de
vpn.ivi.fraunhofer.de
sand2.fokus.fraunhofer.de
diasim.igd-r.fraunhofer.de
miraculix-dmz.ivi.fraunhofer.de
portal.moez.fraunhofer.de
vpn.iem.fraunhofer.de
remote3.fraunhofer.de
zf-prognose.iao.fraunhofer.de
dynamo.sit.fraunhofer.de
dci2.easw2k.eas.iis.fraunhofer.de
support.igd-r.fraunhofer.de
tfs-extern.ibp.fraunhofer.de

Certificate

The complete raw certificate details for www.imk.fraunhofer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7745335042862207752403249575332596824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fraunhofer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.imk.fraunhofer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840233287633241279627383344325922844219944958986388398676450008070558249291393951354768598174265292661538321616884160765308941778396392758884238055267343042079310691018067403497136757177327078469460319539775788914495434360563014757988293296150116976514007508663493238001798593894798751877457375079088434411964623095149633274498037059178440431105723690271646173066289590779148485275756914280685676539357502484118096714268170446158422686059603578581251204261884346681576687876749601346794704757010003629157988881661274202211113273151971100937395827808174237629194933669499542266930747524951165405324943116438262817764161816929325967828810874933963974130825272785394180002244855895063356960888367711749492064151222307345938328782944477422942707526404639214654177869161576625502100028744233143910012188497876147726328786910635259319090971974759024736605642841033646591752590903110406915506933007861265936973888279511493823962511231551796042904844038795916446678072658671066047429710490239743865195404194255035226127163748736884840133055108413792783424369681863085751982822170961175106334093808486410799287807619235085281398577188056523037052301144004691100756640913486426531907477727841640076591946717119171518068595722215759360399863071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b22f10175331bb3147ce34d1721adacc0d5b99e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imk.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imk.fhg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imk.fraunhofer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imk.fhg.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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