dicom12.hmi.de

- Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH -

Issued by HMI CA - G02

About this certificate

This digital certificate with serial number 0d:53:70:28 was issued on by Hahn-Meitner-Institut Berlin GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH

Organization: Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH
Organization unit: Zentrale DV-Systeme und Netze
Country: DE

Hahn-Meitner-Institut Berlin GmbH

Organization: Hahn-Meitner-Institut Berlin GmbH
Organization unit: Abteilung DV-Systeme und Netze
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:53:70:28
Serial Number (int): 223572008
Serial Number lenght: 28 bits, 4 octets

SubjectKeyId: 21:82:4d:8d:d8:f9:37:7d:ba:67:a2:50:a8:6c:2d:9e:14:e6:69:e9
AuthorityKeyId: f0:be:7f:8a:55:23:b1:f7:f0:07:8d:ee:0d:a2:22:fb:7e:ca:81:b8

Fingerprint (sha1): 2d:2d:02:fa:45:8d:bb:28:d4:bf:ea:77:49:c5:fa:8a:d6:2c:11:8a
Fingerprint (sha256): 12:56:36:1c:ea:81:33:28:3b:4a:2d:1b:74:ca:a2:43:29:3f:4e:32:8c:3c:fd:cc:0b:db:95:b4:ba:87:b2:22

Issuing Certificate URL: http://cdp1.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt

Revocation information

CRL Distribution Point: http://cdp1.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl

Check the revocation status for certificate dicom12.hmi.de

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dicom12.hmi.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name hmi.de

(limited to 100 certificates)
portal.helmholtz-berlin.de
ldap.basisit.de
dicom12.hmi.de
mail.helmholtz-berlin.de
hzb-intern.helmholtz-berlin.de
mail.helmholtz-berlin.de
wssadmin-intern.helmholtz-berlin.de
f-intern.helmholtz-berlin.de
e-intern.helmholtz-berlin.de
ifolder.helmholtz-berlin.de
ldap.basisit.de
hmi-domain.hmi.de
g-intern.helmholtz-berlin.de
radius.hmi.de
mail.helmholtz-berlin.de
site-intern.helmholtz-berlin.de
sf-intern.helmholtz-berlin.de
wiki.hmi.de
a-intern.helmholtz-berlin.de
mail.helmholtz-berlin.de
np-intern.helmholtz-berlin.de
gf-v-intern.helmholtz-berlin.de
mssb-intern.helmholtz-berlin.de
gf-extern.helmholtz-berlin.de
www.hmi.de
mail.helmholtz-berlin.de
dicare.helmholtz-berlin.de
gf-v-extern.helmholtz-berlin.de
e-extern.helmholtz-berlin.de
mail.helmholtz-berlin.de
gf-intern.helmholtz-berlin.de
diprint.hmi.de
test-intern.helmholtz-berlin.de
radius.hmi.de
mail.helmholtz-berlin.de

Certificate

The complete raw certificate details for dicom12.hmi.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBENB1yPecbBTL3bUZaz
I03SXzet5UmqOid+mf7yfl7CfZQIlO68Ri/1h9KuiXJEEQo2mYt8LCIMsqpHi4FK
kgmS5MD245T8FlqWGTcNWSWhrc9JlnF4PoMdOufP2aMzK2/W4iS211GvP/5uwLYU
nhIVqe0cnb1bz50D7Nmzez6dy9KvvIiR8NXSQfIpgENTBrK2FxJfVTZ/Bqwc0t0x
fDg3mFPYD5JUc8YgFchgidOWInlp/Hi2HdHxvjIcHDbuyQYzgPk83QUTDaMAxNAv
jAR5OQT3qjrBnDl4+F42viqOec059P7s+SNiQaOwpkeYS4DV2jgNa1/GKZ/jtgia
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 223572008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hahn-Meitner-Institut Berlin GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abteilung DV-Systeme und Netze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HMI CA - G02'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-12-01 14:20:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-30 14:20:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helmholtz-Zentrum Berlin fuer Materialien und Energie GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zentrale DV-Systeme und Netze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dicom12.hmi.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19196630463839010585049492086001495173885475550488672763604165356610043725055125422164095265898018341969657687165313077967350946308818354120315384510268813422094983021551810249991343193355955405115563119028207282854855362402540368327775431471679533469095772063468677952204955956692137716093778445922001612509140769945584928028043841662134294043031819751162190916225295551204616597661495612001256201392771060868733256121716396392690427875998845791496432388337040079755852148184184024391300818032478114567996927136878108124283859391030043827453575834055423584763852854588279366413927282904010256564215970274393656433167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21824d8dd8f9377dba67a250a86c2d9e14e669e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0be7f8a5523b1f7f0078dee0da222fb7eca81b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hmi-ca/pub/crl/g_cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/hmi-ca/pub/cacert/g_cacert.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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