*.ak.token.bild.de

- BILD GmbH & Co. KG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:ab:e7:4b:27:c3:00:53:f9:a2:73:93:e7:9d:37:50 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BILD GmbH & Co. KG

Organization: BILD GmbH & Co. KG
Organization unit: Betrieb 0513
State / Province: Berlin
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:ab:e7:4b:27:c3:00:53:f9:a2:73:93:e7:9d:37:50
Serial Number (int): 8867941928555240334519943992803407696
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6d:ac:c9:f9:e8:8e:3c:3f:fc:d0:df:58:bd:ed:38:62:63:3d:db:34
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 87:ec:55:42:bc:21:3f:bd:31:f1:29:a3:cb:51:a3:e0:cf:3b:22:44
Fingerprint (sha256): 0d:45:0c:83:34:43:5a:6e:2d:17:f8:2f:39:c5:0c:86:f3:84:e5:d5:f3:f4:4d:9c:d4:79:d7:0f:d4:0d:86:3c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.ak.token.bild.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ak.token.bild.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ak.token.bild.de

Other certificates including the domain name bild.de

(limited to 100 certificates)
www.12xgratis.bild.de
ast.myhomebook.de
www.aboservice.bild.de
api.slack-live.bild.de
*.axelspringer.de
fck.bild.de
svs.bild.de
on.bild.de
www.vergleich.bild.de
*.prod.ps.axelspringer.de
ostsport.bild.de
vergleich.bild.de
kmp.bild.de
cmp.axelspringer.com
link.mail.bild.de
partner.vxcp.de
el-shop.welt.de
lesershop24.bild.de
tv.bild.de
fuereuch.bild.de
clans.bild.de
coupons.bild.de
amazon.bild.de
onlinegames.bild.de
*.prod.ps.bild.de
strom.bild.de
tag.club.bild.de
vergleich.bild.de
offer.bild.de
partner.vxcp.de
*.prod.ps.axelspringer.de
222.bild.de
toralarm.bild.de
www.abo.bild.de
august.bild.de
freischalten.bild.de
aboservice.bild.de
www.videothek.bild.de
ostsport.bild.de
fck.bild.de
horoskope.bild.de
12xgratis.bild.de
12xgratis.bild.de
proxy.hey.bild.de
samsung.bild.de
*.prod.ps.axelspringer.de
link.mail.bild.de
*.prod.ps.axelspringer.de
m.dkms.bild.de
videothek.bild.de
gutscheine.bild.de
svs.bild.de
bild.de
osterfest.bild.de
api.bildlive.auth.bild.de
12xgratis.bild.de
svs.bild.de
shop.bild.de
www.reisen.bild.de
aboservice.bild.de
film.bild.de
data-bb21a2f11b.bild.de
backend.kubivp.auth.bild.de
www.foe.bild.de
dkms.bild.de
onlinegames.bild.de
cmp.autobild.de
autoverkauf.bild.de
12xgratis.bild.de
www.1jahr.bild.de
www.fitbase.bild.de
dsc.bild.de
epaper.bild.de
videothek.bild.de
*.prod.ps.axelspringer.de
videothek.bild.de
on.bild.de
samsung.bild.de
www.stepstone.de
fwk.bild.de
tanken.bild.de
onlinegames.bild.de
*.ak.token.bild.de
tv.bild.de
wissenstest.bild.de
www.epaper.bild.de
consumer-api.prod.ps.bild.de
www.teilnahmebedingungen.bild.de
autoverkauf.bild.de
el-shop.welt.de
superraetsel.bild.de
adventskalender.bild.de
bild.de
api.slack-live.bild.de
*.services-test.ps.spring-media.de
lesen.bild.de
fahrschule.bild.de
fcc.bild.de
umfragen.bild.de
epaper.bild.de

Certificate

The complete raw certificate details for *.ak.token.bild.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu27y/3CCEOkt2FxeMelG
4jLn++uiRNPhouCfHwQQkGUtUqjTxIIoCg4PV+dZgpXphQ/rQSrk00/b61LGWqNp
5FJBDqOXe+wl/WkJke61sLImK7r2vUZbk9YW4pA9OpPOheOtQLxZWEsmvi7KFDBm
AJe9ZgW/twS/QJrYTa3Xfx4nEHKT+X22m/IEqp2hIBJHEKH+QgwFUXJcMYC7oVNp
yKUtOI2/o3cu0PcpDQ2AGtV4HO4KwzC088Uw0AqkwhpCvl6iAAqTJq9owT18JC9W
Nvvr1eRhdPmZ4pb6N2L8JvwBDEsd2pJ3Nn4f/bZwsS47byQovbpeH50GuW+UXICA
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8867941928555240334519943992803407696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BILD GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Betrieb 0513'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ak.token.bild.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23661274123311631532996451809502909707877232975491104590777447766057232260775466452006636240168181658915463441889800804388230871200700050324962908456782290670558162594269711120984267156103932574637729098334591634797196548158056234281531021704176275736435967406002870067540285944850549601681889276946993669703396042991652526414346384082311613614025839397627480074963595369247353390223852759158745977519289089731555866421869364768464614132227004426712359256540118422869045930958170400451925575903429438305580569981751612262884396220523008240398602538703788278215100745539787284434272649826270971151175077011253687779501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6dacc9f9e88e3c3ffcd0df58bded3862633ddb34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ak.token.bild.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001699afb7de80000040300463044022007ded55de33a745badda579563e23b0279b87295275141d2e3085e6878546d7b022078a203c183ef2b13b8d60430740502ed5b97d30c875050efd884f3cfd2629a3b0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001699afb7f25000004030048304602210081c83ae6d1298f75514f03741ebef7c3bddfefccb5cef27aa1bc222b6f60b48d022100ce54d2b2b3cf05f41d2bbc6268c2d5aa70f4245760278542c7c4c53969f5b744
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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