apnac03v.funkemedien.de

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 16:5e:f2:31:ca:b1:7e:84:17:29:6d:64:62:eb:e3:df:56:1a:5f:2c was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apnac03v.funkemedien.de

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 16:5e:f2:31:ca:b1:7e:84:17:29:6d:64:62:eb:e3:df:56:1a:5f:2c
Serial Number (int): 127715165123243470955516136102649016695209484076
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: ff:97:cc:8d:d3:c7:7e:4a:82:7f:14:a9:26:0e:39:66:fc:cd:f3:b4
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 01:d6:d9:52:b0:9a:64:4e:72:a1:20:2f:36:ca:4f:ec:2e:1b:4e:8e
Fingerprint (sha256): 0b:ba:a4:3e:01:73:b2:05:3f:3c:9e:27:26:1c:76:82:58:df:8d:b5:30:8c:7e:ec:57:ce:95:28:47:90:8d:cc

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate apnac03v.funkemedien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apnac03v.funkemedien.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apnac03v.funkemedien.de
www.apnac03v.funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for apnac03v.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127715165123243470955516136102649016695209484076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-17 06:23:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 06:23:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apnac03v.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764884585719137376236024607879657415542635914582113240954844948126486128831646226994893632093174918675655539865414778157245807558652622159264898733525398683063190757283223098346942312626425875611826564972489938730578614228189460330145976575918832189769215536874852097914235043671877059511517327182403583240012166406122789031156208718993879400845848245025441311085542161932713329781206177775238404740148671058732556163148116075687367357416321974812011582520203479796844250998833771440286635554177772125636918511592668273047543669933894203210437552191919248119925952725753493417981925814375335142722680731255072889783649198734105385068612232663476203693177132378411761001906596958218548024376725846813764107919152505271424537363094154743448599564390303225194275377615206552295665146356847207575816979172787339580611321130965507525549338011480856197600730905271913708002614941091759036511506675543160735132322317042823630742108453300639625357889175233614064744266439574052531365859829386025387085729815111838467032399816792557851810005187102420308326591073839243932056483337081551978722401340972678711508569280659025963503878010959208253229683127033687809070493697672578619194710482836201680362935953941977399228946627039250145807221463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnac03v.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apnac03v.funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff97cc8dd3c77e4a827f14a9260e3966fccdf3b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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