ebc.mandant.dwd.de

- Deutscher Wetterdienst -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d6:f3:66:df:6c:3d:32:73:ff:1f:89:fd:c2:bd:9c:64 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
State / Province: Hessen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): d6:f3:66:df:6c:3d:32:73:ff:1f:89:fd:c2:bd:9c:64
Serial Number (int): 285718605741754136860263183175655464036
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 45:b1:ce:06:77:cb:97:17:ef:bd:5e:5a:a3:d9:85:e0:99:32:e0:00
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 30:45:aa:8f:16:29:23:20:ef:38:e2:27:0f:7b:6a:b6:27:20:9c:46
Fingerprint (sha256): 14:29:2b:88:64:4c:53:6c:b6:85:1a:2c:08:a7:70:aa:61:e6:ab:4d:b3:7a:e9:2a:6c:be:5f:9f:31:53:3c:7e

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ebc.mandant.dwd.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ebc.mandant.dwd.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ebc.mandant.dwd.de
www.eisenbahn-cert.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for ebc.mandant.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285718605741754136860263183175655464036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ebc.mandant.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4968699622771213156155386646852962625783386602898528812058371770149830487309018671713639335680024460946001358465356787076576039752423418095797549315034548350063967967318229126492005090132352892996487499208025276281948039382866396261058000099896705792766759197840883862734054800203908343920308102291687926609145222890014956363171224281578182870541180422624390215572502447650753307206702434419688799908530254633179273469528237838621143784732293354016457581592528885216262225154637953278713671899433294823261304429426070047032569743809750216562821471160574678671223145151840775655393529550327998239959679631846515507228774627891762864717997946259357333510771123114434993871846917978846067886302361870819134207412759366959448384034233213289287683012053680719740633211663142004582716092445472413672885046111559262023837101100137202223572306936934914876250349869809092420522368865075349413308034792925502775749122889440493043435117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45b1ce0677cb9717efbd5e5aa3d985e09932e000
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc.mandant.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eisenbahn-cert.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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