www.museumswelt.eu

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 73:89:be:67:b1:ae:f0:59:71:17:f8:a1:9e:fe:69:85 was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.museumswelt.eu

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 73:89:be:67:b1:ae:f0:59:71:17:f8:a1:9e:fe:69:85
Serial Number (int): 153576426058200364404510201381591607685
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f8:ad:61:55:2d:1e:ac:0d:b8:1f:7d:3f:72:11:fd:ef:41:fb:90:30
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): 7a:80:1a:80:b6:1e:67:25:27:29:3e:72:11:10:a2:6b:11:1b:91:ed
Fingerprint (sha256): 0e:81:f4:9e:37:30:a2:81:dc:a0:8a:17:2a:1a:a8:9a:f4:ea:f6:97:67:7e:1a:54:f7:8c:36:c0:24:ab:54:56

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate www.museumswelt.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.museumswelt.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.museumswelt.eu
museumswelt.eu

Other certificates including the domain name museumswelt.eu

(limited to 100 certificates)
www.museumswelt.eu
www.museumswelt.eu
www.museumswelt.eu
www.museumswelt.eu
www.museumswelt.eu
iga2017.museumswelt.eu
www.museumswelt.eu
museumswelt.eu
www.museumswelt.eu
www.museumswelt.eu

Certificate

The complete raw certificate details for www.museumswelt.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt7rW7uHSM9IdrXUbfZSd
UP+tCYJHlzMhY2J0vCyocklF7wEwLodwhPFuJxntpCoUbuOS5Kqg4Xw09hNB1AM3
ESPYCs3c8HrT+ytH6C/QgcgZXWhu+b2Lk1k3fKMXFMwfOaFHMbcfEW/TcH0WBGHx
YIq4x6F5X+Soh1DBJJlERaObDaGVUsfgiyOLUQsfIkg6/FjsPGLIPztmrCpFtrfM
V9o36tNB4Vo/e1CSLdSlR+73WIWoK2ijbFZvs+axByPjeMCp03YMieGGYB6q/R58
P1qvhii0qZ0hBUc1ib8wsf6cQhj01x6nACMSaLzcebOL0ds4zXbKVgfDOnXMRt8K
THRkkCtsy1Xz/16Qhho9qF7vLnO8QlX0rqGmhm/fF8078E+adhK0z6AB5UGLh8O8
XUpHlyZDoA0Q03ZRzrnTwc5N79tUaJa2yVdEjE2stv/3ckff79BGSeq6XEDNZBdv
5UesAoXA7GYcGsPFD4OzdaQUkz1gQw5h8tTMZEdu6ix0Ito/Xu9AwpCq7CWl4yWc
dBoGdsbE1uwvbvo3sRWrk+/92eh53gE68wQWj4/QoKlGZ/vbWQJPCaE+R1mdnrBD
NGwW2v5urILtUm6P+oZ/5HMY7b68KacNiIJ74NXZFaliQbRMJFW1Dk8LDtuD7phj
5HBc7PwPEKn1q1XrI1GtZUkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153576426058200364404510201381591607685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 18:51:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-19 18:51:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.museumswelt.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749552360520451754539760310917255521666877367702586132003101860991292130742865007784162826289903800925915298837460494888674087767508963645807796338463895366527987542837714113364340587090225334791338816927518927209829560939856595116464199720226413748558901120467170665574499641521930683656659653353826499505292539339350821702301772691153581951332955991395186207940808192698029558855548223901860326583424672111561278449937871124276746370926946124483840916304370290933549652354052313089504433647793278575276888638168060784535546904931513106761679224721667960431187693955787971550110597944986210357809287442444806080767501807700938693715084594848707312068113144715136208681667506451965610926354574962803317439278954610914648357362983646023376314388601495526834193750378074948070620577629010882642362612598871316077092756100357495858703323111448690635730093889298256732162155856220161776129622518264571955937207611959900035793166039016931181655712229953210048921085402156077367995211930808018816324680800563513281155366513785783011283953707216076167221025006906730594087976419111277383031881407499447101015917029549029219146991339170398610834149789088071246176030293305576345321211476092778880909684655863537718807364154558057988305544521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8ad61552d1eac0db81f7d3f7211fdef41fb9030
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museumswelt.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museumswelt.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000173686a69b0000004030047304502207643a3c4b5e49aadf7441dac88eb6bd0fd3dfbda561cc2dfbd98f3d63e0322c80221009720228ddba6ca337eac6d7ea6afca7c2763b3eea0ae899f65db1a03df8ef6c4007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000173686a69a1000004030048304602210095cb2e1b7cbcf2f62d89c09fbd8f4613b0a2f2ba48d2a5d64f986c0002d1b475022100c40d47e6298c6ace5a1a396f6097f2d466896d8a3fa7610fc1dbf133a77c58360075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000173686a6b920000040300463044022012a5ab24cd3c06c92e49863ea109a4ea7bd307c88903b29adabb2a517a175d0b02200d4d7368c9c4f685036479d4e9b733889f968b3af66a59eb5091446f031d09a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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