ssl2.fioport.de

Issued by thawte DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 3b:0b:cb:15:d5:22:38:03:83:51:fb:d8:5e:39:a7:93 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ssl2.fioport.de

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:0b:cb:15:d5:22:38:03:83:51:fb:d8:5e:39:a7:93
Serial Number (int): 78485686075656548781024893922969233299
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 7d:29:31:2f:c1:1e:6e:ae:31:05:6a:b3:eb:1c:cd:a9:dd:ae:80:9a

Fingerprint (sha1): 10:6e:4e:5d:ab:38:ea:9f:6b:3b:c1:d0:2f:52:19:df:f4:37:f5:b5
Fingerprint (sha256): 0b:aa:dd:d6:55:db:98:46:00:fa:81:33:fb:b0:a3:97:de:9a:d7:3d:44:8e:60:e6:aa:14:79:5a:0d:42:59:9c

Issuing Certificate URL: http://tm.symcb.com/tm.crt

Revocation information

OCSP Server: http://tm.symcd.com
CRL Distribution Point: http://tm.symcb.com/tm.crl

Check the revocation status for certificate ssl2.fioport.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl2.fioport.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl2.fioport.de

Other certificates including the domain name fioport.de

(limited to 100 certificates)
ssl.fioport.de
ssl2.fioport.de
*.fioport.de
*.fioport.de
ssl4.fioport.de
ssl.fioport.de
ssl4.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl3.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl5.fioport.de
ssl5.fioport.de
*.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl3.fioport.de
ssl5.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl2.fioport.de
ssl5.fioport.de
ssl2.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl5.fioport.de
ssl3.fioport.de
ssl5.fioport.de
ssl.fioport.de

Certificate

The complete raw certificate details for ssl2.fioport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78485686075656548781024893922969233299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssl2.fioport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740486825718561791999594774186518623184323793336570487718431070097810479548715063081739040551108508957357145335896735551241784841082796777889934962026419175105503618867876596169749431137732835275180708562987509783033939665800167170135562845607524816299471383276619110909118741157752061721490292050316493271557636803061255259546895116656093480734086940436126805347373960954278116574138239423946656390830613623814237812822639496853801528313028492494559551538506582431208179405495560852981639223578585558167714053147008127538241927778756801463791710490393690900016181981065518075332925529571419500497112235958221344985199402360768561268453741950273635692716233178978761818829441138221908157540279113018429841954606118277811581090696543068965972284638234408672060389436889950293702973877953544122667964473633085353134262947855532897344134210350725118279217487518573169301855126400631401522544701087335583203506329622021200920117493974422933306126515771576396590945851653825578698099759190071122273485017035428403495130898233480862108455150668325407084057124652694443690898142057224521525365097561280795241660939947836863723572005838365654240936600333285055666656575036885493451449334218908816883191172211093067133098954187969987697678427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl2.fioport.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d29312fc11e6eae31056ab3eb1ccda9ddae809a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00480a4071792282570e46933c199b7fdc530fa336f37da3809318d4de61daadb4f734e1a83a5babf2f8ba4f73aee42ad61fbaac9aabeef5b9a033cb98b4aed6a91588207487a495ca8a25d7af21e47fa95efbb2e65565d32937fa0bfb65db368c713666042a8c6715e12982e3eddc7accb7476ef4ca650e6a06cfc9b813fd351f20ee8c5ab2014013a524eae5a72e8cf5a1dc4376bc99f25e04e35ebf9de5286a811ef8547aa17d977a9dab4e9f8866ed852f4df58da66efaa9ff1d862502a61bd50bf14b16e9f62bc2764c7385bf05a2e99489cdfc3511997060685633a43fe6b73662c7b440ccce6bf36e70dba8b1d04de0cbef9ddbfd8924add80c1468618a