benet.bertelsmann.de

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 7f:94:1e:da:91:e9:c6:eb:8c:8e:e8:19:6c:8e:3e:dc was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=benet.bertelsmann.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:94:1e:da:91:e9:c6:eb:8c:8e:e8:19:6c:8e:3e:dc
Serial Number (int): 169581041188932953521286320804640734940
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): 1a:c7:fa:5a:cc:b2:70:77:5f:25:73:d2:17:d6:eb:ce:ee:92:2d:65
Fingerprint (sha256): 0c:19:f9:65:39:b5:a3:82:56:e2:f1:10:99:08:ba:2d:aa:86:06:79:89:b4:26:bb:d3:f2:6c:6d:3f:ec:50:61

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate benet.bertelsmann.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benet.bertelsmann.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benet.bertelsmann.de

Other certificates including the domain name bertelsmann.de

(limited to 100 certificates)
tts-eu.inrix.com
betravel.bertelsmann.de
www.haussortimente.bertelsmann.de
pp1.bertelsmann.de
cc.secureconnect.bertelsmann.de
api.qa.live.bertelsmann.de
owasemea.bertelsmann.de
greetings.bertelsmann.de
itsasqas.bertelsmann.de
www.haussortimente.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
jp5.bertelsmann.de
csacie.bertelsmann.de
www.elettershop.de
benet.bertelsmann.de
betradecompliance.bertelsmann.de
ias.bertelsmann.de
pp5.bertelsmann.de
degtluv8626-repos.bertelsmann.de
*.bertelsmann.de
pp5-test.bertelsmann.de
www.bertelsmann.de
benet.bertelsmann.de
seratio3.bertelsmann.de
ess.bertelsmann.de
hotelrates.bertelsmann.de
esszeit.bertelsmann.de
*.bertelsmann.de
cp5-int.bertelsmann.de
fragobert.bertelsmann.de
www2.gitta.bertelsmann.de
directnet.bertelsmann.de
autodiscover.bertelsmann.de
seratio4.bertelsmann.de
grc-training.bertelsmann.de
www.haussortimente.bertelsmann.de
gp1.bertelsmann.de
*.benet.bertelsmann.com
betradecompliance.bertelsmann.de
itsasprd.bertelsmann.de
alumni.bertelsmann.com
*.bertelsmann.de
bop.bertelsmann.de
sp5.bertelsmann.de
*.bertelsmann.de
jobsearch.createyourowncareer.de
pp5-int.bertelsmann.de
gitta.test.bertelsmann.de
bstportal.bertelsmann.de
securelogin.bertelsmann.de
sl2.bertelsmann.de
wp1-test.bertelsmann.de
storefront2.bertelsmann.de
guest.bertelsmann.de
besuchen.bertelsmann.de
mietwagenservice.bertelsmann.de
www.haussortimente.bertelsmann.de
vas.bertelsmann.de
lc-service.bertelsmann.de
clm-int.bertelsmann.de
jppess.bertelsmann.de
ess.bertelsmann.de
sni2878bgl.wpc.edgecastcdn.net
greetings.bertelsmann.de
grc-int.bertelsmann.de
service.bertelsmann.de
*.bertelsmann.de
securelogin.bertelsmann.de
imp-test.bertelsmann.de
gitta.test.bertelsmann.de
www2.gitta.bertelsmann.de
fragobert.bertelsmann.de
vas.bertelsmann.de
imp-test.bertelsmann.de
peoplenet.bertelsmann.de
seratio4.bertelsmann.de
ess.bertelsmann.de
www.haussortimente.bertelsmann.de
deac.bertelsmann.de
b-share-qa.bertelsmann.de
b-share-dev.bertelsmann.de
keys.bertelsmann.de
bessermachen.bertelsmann.de
autodiscover.bertelsmann.de
jp5.bertelsmann.de
skypetmg.bertelsmann.de
grc-restore.bertelsmann.de
dubbmlske0001.bertelsmann.de
autodiscover.bertelsmann.de
itsgi7000.bertelsmann.de
deac.bertelsmann.de
mpsportal.bertelsmann.de
*.sti.bertelsmann.de
jppess.bertelsmann.de
www2.gitta.bertelsmann.de
cwa.bertelsmann.de
divisionalreportingserver.bertelsmann.de
skypetmg.bertelsmann.de
insurance.bertelsmann.de
www.haussortimente.bertelsmann.de

Certificate

The complete raw certificate details for benet.bertelsmann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSjC4GbyiSQzsGkSOgMj
0A2MI6/a4D7qX4N3jlZp1pkDTpl/YxsiIKZFLcIqFPVbcFWmeN5AI39pOEhTrjS6
UoCHy2YoFMn/a0qHVPnJVYCeguE4loqP0uuzV645iJz764PPG1GiVIzBnIW+gLM+
GoU6YjK/vbbaHwXhwKdEY88fnjSqT0g4gUA8vt17NiWWwDaC3R5Rv9LRLbYSXhsr
1RqK4NB+nkr5DihOPFnBeriwkpbNKITbmwaA1Z/kxkTcSNXOEEY6qru8C1BPTMPx
PcHcEHk3FpTtJeo2k1euOuhAjxmAmuQljewDTHVQxeomWrpY/P0e7L7sK3uWhgai
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169581041188932953521286320804640734940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'benet.bertelsmann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24889046193224963505482428607714264463665050712739974572599827930545539287439677421367117810797255920238198250419061674194417559694350548390933606269893550957581818911843696435377092325008140156195376017854224294606474855370240813888226831976432409622094438948130476266899704946456517372700243341708801191580921249468272030184742632604495741563724515465145330813439366158900826082498985380810178088610198523918921513459938885405272563646168088366797415091307158262975019980640106497000451273633582657611011842617092228977215912445262952369164494771173682428007751791647909151612183079419124898204142986880157959496211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benet.bertelsmann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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