seratio4.bertelsmann.de

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 5c:43:75:fb:ef:04:6b:cc:c3:4e:1b:ee:1a:ed:c9:33 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=seratio4.bertelsmann.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:43:75:fb:ef:04:6b:cc:c3:4e:1b:ee:1a:ed:c9:33
Serial Number (int): 122639252503898774205052735233536674099
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): 4d:d3:c2:6d:20:2c:80:d3:2b:11:9c:70:a1:11:44:98:fb:8e:c4:1b
Fingerprint (sha256): 10:76:0c:d6:f5:a6:5a:9c:3d:63:b9:c9:ba:c9:31:e4:c9:cc:43:ba:b2:31:2e:5f:57:a5:94:02:92:01:fa:39

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate seratio4.bertelsmann.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seratio4.bertelsmann.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seratio4.bertelsmann.de

Other certificates including the domain name bertelsmann.de

(limited to 100 certificates)
tts-eu.inrix.com
betravel.bertelsmann.de
www.haussortimente.bertelsmann.de
pp1.bertelsmann.de
cc.secureconnect.bertelsmann.de
api.qa.live.bertelsmann.de
owasemea.bertelsmann.de
greetings.bertelsmann.de
itsasqas.bertelsmann.de
www.haussortimente.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
jp5.bertelsmann.de
csacie.bertelsmann.de
www.elettershop.de
benet.bertelsmann.de
betradecompliance.bertelsmann.de
ias.bertelsmann.de
pp5.bertelsmann.de
degtluv8626-repos.bertelsmann.de
*.bertelsmann.de
pp5-test.bertelsmann.de
www.bertelsmann.de
benet.bertelsmann.de
seratio3.bertelsmann.de
ess.bertelsmann.de
hotelrates.bertelsmann.de
esszeit.bertelsmann.de
*.bertelsmann.de
cp5-int.bertelsmann.de
fragobert.bertelsmann.de
www2.gitta.bertelsmann.de
directnet.bertelsmann.de
autodiscover.bertelsmann.de
seratio4.bertelsmann.de
grc-training.bertelsmann.de
www.haussortimente.bertelsmann.de
gp1.bertelsmann.de
*.benet.bertelsmann.com
betradecompliance.bertelsmann.de
itsasprd.bertelsmann.de
alumni.bertelsmann.com
*.bertelsmann.de
bop.bertelsmann.de
sp5.bertelsmann.de
*.bertelsmann.de
jobsearch.createyourowncareer.de
pp5-int.bertelsmann.de
gitta.test.bertelsmann.de
bstportal.bertelsmann.de
securelogin.bertelsmann.de
sl2.bertelsmann.de
wp1-test.bertelsmann.de
storefront2.bertelsmann.de
guest.bertelsmann.de
besuchen.bertelsmann.de
mietwagenservice.bertelsmann.de
www.haussortimente.bertelsmann.de
vas.bertelsmann.de
lc-service.bertelsmann.de
clm-int.bertelsmann.de
jppess.bertelsmann.de
ess.bertelsmann.de
sni2878bgl.wpc.edgecastcdn.net
greetings.bertelsmann.de
grc-int.bertelsmann.de
service.bertelsmann.de
*.bertelsmann.de
securelogin.bertelsmann.de
imp-test.bertelsmann.de
gitta.test.bertelsmann.de
www2.gitta.bertelsmann.de
fragobert.bertelsmann.de
vas.bertelsmann.de
imp-test.bertelsmann.de
peoplenet.bertelsmann.de
seratio4.bertelsmann.de
ess.bertelsmann.de
www.haussortimente.bertelsmann.de
deac.bertelsmann.de
b-share-qa.bertelsmann.de
b-share-dev.bertelsmann.de
keys.bertelsmann.de
bessermachen.bertelsmann.de
autodiscover.bertelsmann.de
jp5.bertelsmann.de
skypetmg.bertelsmann.de
grc-restore.bertelsmann.de
dubbmlske0001.bertelsmann.de
autodiscover.bertelsmann.de
itsgi7000.bertelsmann.de
deac.bertelsmann.de
mpsportal.bertelsmann.de
*.sti.bertelsmann.de
jppess.bertelsmann.de
www2.gitta.bertelsmann.de
cwa.bertelsmann.de
divisionalreportingserver.bertelsmann.de
skypetmg.bertelsmann.de
insurance.bertelsmann.de
www.haussortimente.bertelsmann.de

Certificate

The complete raw certificate details for seratio4.bertelsmann.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuolXutzrESi3aSTqGVJG
3TO4tAp3NBOZ1SFer3k1xkDfcE9BSmLYGIUrG8I+PZfam0Dg7d10AxcST3qRbnT2
UaL2+Y+2LrRbpLHDeuna30jBo9xfLSjFK8wEB18xf1dY6dG5XHskpMztWmD8ZYF/
XH5zwwLLVk9klobkiOiBvkFCzMwdb0dFJILFEbgYFfkwoMa0aRMLWqmXnPHBTh9M
xHEgMikzb0bgf57M1foN8HIJoqJLZAWi+uLSrr0lc0AEAGBaE6h6LWDEKUi0mwy9
ISzmW6V52gBIBF1+aZVaR6Qs46AJsNem1aMmkXhbWxlkNgVn21DWzYod4Ueci90f
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122639252503898774205052735233536674099
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'seratio4.bertelsmann.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23548050930807607623661656406838883859054517165461234550414723104214852540710137626266048677677283113983617706741146294592236739556717780800371408257695135537790626924091386486434741440070769652422436486399418076239240328831597775453390986954094480859126360399912747790036532891416238390129819100274062212987469305972491343684104586096878790287004698162044765307450979859306616105570795588224354311393529817874786010434080506387604715785035533620092325284038428333879292582912033491691832655450058021031386497397625908103445587020811573507711378438883534656014120558425791022356406936784507495766138379882669270704109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seratio4.bertelsmann.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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