academy.mbtech-group.com

- MBtech Group GmbH & Co. KGaA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ed:57:6e:db:b0:36:a2:59:00:00:00:00:50:df:fb:dd was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MBtech Group GmbH & Co. KGaA

Organization: MBtech Group GmbH & Co. KGaA
State / Province: Baden-Württemberg
Locality: Sindelfingen
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ed:57:6e:db:b0:36:a2:59:00:00:00:00:50:df:fb:dd
Serial Number (int): 315481013298276994577467363165877566429
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e1:32:21:19:77:24:34:d0:f0:c9:d5:70:1e:22:35:a7:c3:29:44:d7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 20:3b:5a:1b:ff:fc:f3:50:0d:a6:d8:5a:cf:e0:ae:e5:e8:5c:d7:74
Fingerprint (sha256): 0e:d0:76:39:ff:9a:cf:08:1c:fe:f5:1d:6a:c1:cb:70:7f:8b:47:54:49:59:b0:e6:ee:84:e9:14:b2:39:5d:09

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate academy.mbtech-group.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for academy.mbtech-group.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.mbtech-group.com

Other certificates including the domain name mbtech-group.com

(limited to 100 certificates)
mdms.mbtech-group.com
sip23.wp.corpshared.net
psm2.mbtech-group.com
fahrtenleitertool.mbtech-group.com
career.mbtech-group.com
psm10.mbtech-group.com
*.akka.eu
sip13.wp.corpshared.net
sip23.wp.corpshared.net
academy.mbtech-group.com
psm9.mbtech-group.com
sip23.wp.corpshared.net
stores.za.com
extranet.mbtech-group.com
emeeting.mbtech-group.com
sip23.wp.corpshared.net
whoiswho.mbtech-group.com
polarion_apm.mbtech-group.com
mail.mbtech-group.com
tsportal.mbtech-group.com
sap.mbtech-group.com
fahrtenleitertool.mbtech-group.com
academy.mbtech-group.com
prorenal.com
vpn2.mbtech-group.com
sip23.wp.corpshared.net
psm11.mbtech-group.com
academy.mbtech-group.com
mx2.mbtech-group.com
academy.mbtech-group.com
logon.mbtech-group.com
psm13.mbtech-group.com
prorenal.com
sip13.wp.corpshared.net
mobile.mbtech-group.com
email.mbtech-group.com
zzzc.cc
www.mbtech-group.com
psm6.mbtech-group.com
polarion_apm.mbtech-group.com
share.mbtech-group.com
email.mbtech-group.com
psm9.mbtech-group.com
www.mbtech-group.com
sip23.wp.corpshared.net
career.mbtech-group.com
fahrtenleitertool.mbtech-group.com
*.akka.eu
www.mbtech-group.com
sip.wp.corpshared.net
email.mbtech-group.com
sip13.wp.corpshared.net
mobile.mbtech-group.com
prorenal.com
vpn2.mbtech-group.com
sip13.wp.corpshared.net
*.akka.eu
vpn1.mbtech-group.com
mail.mbtech-group.com
mbtech-mdm.telekom.ebf.de
psm14.mbtech-group.com
extranet.mbtech-group.com
share.mbtech-group.com
share.mbtech-group.com
vpn2.mbtech-group.com
cadmin.mbtech-group.com
mobile.mbtech-group.com
psm7.mbtech-group.com
www.mbtech-group.com
www.mbtech-group.com
ouen.cc
career.mbtech-group.com
psm.mbtech-group.com
extranet.mbtech-group.com
prorenal.com
mbtech-mdm.telekom.ebf.de
email.mbtech-group.com
psm7.mbtech-group.com
psm3.mbtech-group.com
sip.wp.corpshared.net
*.akka.eu
sip.wp.corpshared.net
psm5.mbtech-group.com
sip.wp.corpshared.net
psm12.mbtech-group.com
academy.mbtech-group.com
www.mbtech-group.com
sip.wp.corpshared.net
www.mbtech-group.com
psm.mbtech-group.com
guestwlan.mbtech-group.com
www.mbtech-group.com
vpn1.mbtech-group.com
sip13.wp.corpshared.net
psm6.mbtech-group.com
psm11.mbtech-group.com
fahrtenleitertool.mbtech-group.com
extranet.mbtech-group.com
email.mbtech-group.com
psm2.mbtech-group.com

Certificate

The complete raw certificate details for academy.mbtech-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AGEYJctqXaPO81M5q5m
L3bKuwFMLRb5V/4IeXoBNmgs2Iroaxmh/tlZd8IDKMCdrOsTyyQNJs+g6t7v3rKW
VFLltg0OAF9slTaqAN/05+P9duJawbUQ9MDtJ8cEi8RwVOz8aLsTICQmyRQG2hw5
jZFQnpD/djvKIddW+cbWRzG98HhD74Nw/dUZeC0KKlAYxwhc7sxfyEsmb30jEoa9
pCRvoqwTxWWN7bTkcQ3GvuP3dQRPyT8hL/xx8Sa88Oi+D1C2UKP/gWqXdAwRBQIh
lt7wx7wQf/TWY4npq+CcXwOSgom1GirEZejZI5/8olohTVJLJkHUFOEERuRoFhoq
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315481013298276994577467363165877566429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-24 12:52:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 13:22:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sindelfingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MBtech Group GmbH & Co. KGaA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'academy.mbtech-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26258315542267854032899394020147151349734498739094475321579637265818820670744414926972337376067100036820143439481258958220038136561035673762200571860939883393660986997834297042876919690903076281968725537267828996889411681621917825496033627199301591043232517596043450819550051955329516595054360013214434934465787716708945722210474485956245391834889702481050276666551136459490596618512155238010606327519240742218389305248347887882980869453211101693417969174094049132319971586618327366885950156812753999283073535422740606186580621815217314103621758057626821620791846944819440552542254198637160516426829249916621316303503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.mbtech-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1322119772434d0f0c9d5701e2235a7c32944d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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