portal1.gast.ekom21.de

- ekom21 - KGRZ Hessen K.d.oe.R. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 0a:05:a9:b2:54:0d:65:54:b9:3c:67:d9 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ekom21 - KGRZ Hessen K.d.oe.R.

Organization: ekom21 - KGRZ Hessen K.d.oe.R.
State / Province: Hessen
Locality: Giessen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:05:a9:b2:54:0d:65:54:b9:3c:67:d9
Serial Number (int): 3101696096824182411905230809
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 33:4a:90:ef:3f:e1:9e:d0:83:f8:74:9f:19:b4:03:65:e0:d7:8b:6b
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 5d:ce:5a:c7:b2:a2:fc:e8:ba:58:36:49:c6:c6:5c:ca:f3:ca:d8:0f
Fingerprint (sha256): 15:66:58:d1:da:01:ab:94:55:b8:19:58:ea:de:62:23:1f:34:29:18:aa:0b:7b:d0:82:66:4c:9c:21:db:71:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate portal1.gast.ekom21.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal1.gast.ekom21.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal1.gast.ekom21.de

Other certificates including the domain name ekom21.de

(limited to 100 certificates)
*.rwf-prod.intern.ekom21.de
memcg.ekom21.de
openwebfm-khr.intern.ekom21.de
*.ekom21.de
portal-civ-test.ekom21.de
domicil21-mz.intern.ekom21.de
nala.intern.ekom21.de
wkz.ekom21.de
wlan.ekom21.de
portal-civ-test.ekom21.de
idento21-qs.intern.ekom21.de
ecm21.intern.ekom21.de
domicil21-mz.intern.ekom21.de
kis.intern.ekom21.de
webmail.ekom21.de
vvd.ekom21.de
hedocsv37.intern.ekom21.de
aqb.ekom21.de
oos.ekom21.de
owi21togo.intern.ekom21.de
adt.ekom21.de
loga-bd-prod-lai.intern.ekom21.de
*.rwf-qs.intern.ekom21.de
civ-hel.intern.ekom21.de
webkita-zelv-qs.ekom21.de
*.ekom21.de
civ-demo.ekom21.de
svg21-qs.intern.ekom21.de
pushint.avisca.ekom21.de
bpm21-test.intern.ekom21.de
secure.ekom21.de
votemanager-hessen.ekom21.de
efinanz-oze-qs.ekom21.de
efinanz.intern.ekom21.de
www.ekom21.de
curalit21.intern.ekom21.de
openwebfm-kwf-qs.intern.ekom21.de
portal-cor.ekom21.de
hcme01.intern.ekom21.de
kis.intern.ekom21.de
vois-ekom21.intern.ekom21.de
portal-civ-qs.ekom21.de
stellen.ekom21.de
xewo21-webservice.intern.ekom21.de
gewerbe.ekom21.de
ecm21-qs.intern.ekom21.de
portal1.gast.ekom21.de
ema21-webservice.intern.ekom21.de
hcmc01.intern.ekom21.de
*.ekom21.de
fe21.intern.ekom21.de
gnhdbv3.ekom21.de
dms21-kil.intern.ekom21.de
adt.ekom21.de
tasks.ekom21.de
www.shop.ekom21.de
rim.ekom21.de
bpm21.intern.ekom21.de
adt21qs.intern.ekom21.de
www.shop.ekom21.de
domicil21.intern.ekom21.de
ozg.ekom21.de
zeit21.ekom21.de
domicil21-mz-qs.intern.ekom21.de
portal-civ-hel-qs.ekom21.de
citrix.lwv.ekom21.de
esina21.intern.ekom21.de
portal-civ-cor.ekom21.de
fe21.intern.ekom21.de
civ-hzd-qs.intern.ekom21.de
portal-civ-hel-qs.ekom21.de
kundenzufriedenheit-itops.ekom21.de
webkita.ekom21.de
zema21.intern.ekom21.de
teamsites.ekom21.de
prm21-qs.intern.ekom21.de
antragsportal-fm.ekom21.de
migewa.ekom21.de
fe21reports.intern.ekom21.de
zaehlerportal-civ.ekom21.de
owi21oa.ekom21.de
kai2web.intern.ekom21.de
loga-bd-prod.intern.ekom21.de
fernwartung.ekom21.de
owi21oa.ekom21.de
kis-dev.intern.ekom21.de
vois-spiegel.intern.ekom21.de
zema21.intern.ekom21.de
zeit21.ekom21.de
ebot-qs.ekom21.de
sozabis-anwtest.lwv.ekom21.de
portal-civ.ekom21.de
citrix21.ekom21.de
webmail.ekom21.de
openwebfm-rtk-qs.intern.ekom21.de
rim.ekom21.de
tevis-qs.ekom21.de
dvdv-he.ekom21.de
zda.intern.ekom21.de
zeit21-qs.intern.ekom21.de

Certificate

The complete raw certificate details for portal1.gast.ekom21.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3101696096824182411905230809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 15:41:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-08 15:41:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Giessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekom21 - KGRZ Hessen K.d.oe.R.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal1.gast.ekom21.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930459387439156286394478252102495773987507094693172231537606243135916896427937580312732230483825957714698145265912688367639181322768607633234452626846788985911201688644862886192320524846491228889955974746250628157051175585707775681052038196638564293265635877350282429202031166028084317043502697087691717903190473228248837473765753168220300791465370249090932834517993690805708327657122313234834662293209272631408002168760118133293045898230663592505491040636571916967263257146368565907636890573511524728324641473183052625726605945588095090617619524048132077770289732786245247725402682876275780595093765088574413169030272359601108239942500651225063101618429600366547865711734315589399361225652999251768682962101565931962618068057869104575754732835194644021397909797628255706817281405474115436207612914853898799319270711332904763213378507941387524754452797848427210747577934024071758819170575404698575011279469137921920020505366697716194619464058254086546578376804706696280625791129838487060423593772976472942799318912971576095748134440051191572838045181071184621742794622539219040180889321086260282707740199114350963321357528192067391009917701075461144395543309030976593034181396388084805786726008846598261418213291039130377963202026299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal1.gast.ekom21.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							334a90ef3fe19ed083f8749f19b40365e0d78b6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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