*.ebf.de

- EBF-EDV Beratung Föllmer GmbH -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 41:26:33:c3:40:07:52:5c:08:6a:1c:02:69:66:3e:5a was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

EBF-EDV Beratung Föllmer GmbH

Organization: EBF-EDV Beratung Föllmer GmbH
Organization unit: Cloud Services
State / Province: Nordrhein-Westfalen
Locality: Köln
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:26:33:c3:40:07:52:5c:08:6a:1c:02:69:66:3e:5a
Serial Number (int): 86598176878841223746430834620932439642
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): aa:19:81:2a:61:e8:fc:7d:cf:1d:f5:53:46:22:a5:26:26:46:13:45
Fingerprint (sha256): 0d:e0:6e:73:6f:a0:9b:de:fb:11:26:a7:9c:c6:16:66:eb:8e:25:59:7b:cf:0c:bf:7a:50:33:b2:44:6b:6b:54

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.ebf.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ebf.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ebf.de
ebf.de

Other certificates including the domain name ebf.de

(limited to 100 certificates)
adfs.ebf.de
gate.ebf.de
*.ebf.de
*.telekom.ebf.de
*.ebf.de
*.emea.ebf.de
gate.ebf.de
*.telekom.ebf.de
www.ebf.com
*.claas.ebf.de
*.ebf.de
*.ebf.de
www.ebf.com
ebf.com
support.ebf.com
pi-mdm.telekom.ebf.de
support.ebf.de
*.claas.ebf.de
support.ebf.com
*.ebf.de
www.ebf.com
*.ebf.de
support.ebf.de
*.claas.ebf.de
*.training.ebf.de
www.ebf.com
mbtech-mdm.telekom.ebf.de
ebf.de
*.emea.ebf.de
adfs.ebf.de
mbtech-mdm.telekom.ebf.de
*.telekom.ebf.de
www.ebf.com
support.ebf.de
support.ebf.com
*.ebf.de
beta-sentry.ebf.de
*.ebf.de
support.ebf.de
xm-test.ebf.de
*.telekom.ebf.de
*.ebf.de
*.telekom.ebf.de
*.telekom.ebf.de
ebf.com
www.ebf.com
*.ebf.de
support.ebf.com
*.ebf.de
access-sentry.telekom.ebf.de
*.telekom.ebf.de
one.ba.telekom.ebf.de
www.ebf.com
*.claas.ebf.de
*.telekom.ebf.de
ebf.de
www.ebf.com

Certificate

The complete raw certificate details for *.ebf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86598176878841223746430834620932439642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EBF-EDV Beratung Föllmer GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cloud Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ebf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3726098920445725918720935215717757512666479288208462337683913707409144698478049704596775095369936410303499528466954097448387310059943690614655893643241468851966199704312858611894892768510989518022327110269010488670525692378343592585210489417734280466466062287256020923617279978182470005723145661677408161648742788854224959358989193306775922331235687944747359029520293169466711981545714698730294953038338022072965109818335671958752487912817577010537640310476394081017915300350173266685232386209915618831461210665488087369843741513835291277138631890929269817782915391799607236112725957884222394820568063524331130190485918810110089337580019144223092428596523464664402208780767229452644929268421751413309833143509810949274156980846328175237610136862663870297390884877191090925079406221503846495157581241802699120102647862925810953075139995677414578795981482897681338743401861008703794347927989976315452032104588061790024856908189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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