www.intranet.wts-global.com

- WTS Group Aktiengesellschaft Steuerberatungsgesellschaft -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 2c:62:b5:30:00:f9:5f:47:c8:c5:98:30:25:58:3f:d3 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

WTS Group Aktiengesellschaft Steuerberatungsgesellschaft

Organization: WTS Group Aktiengesellschaft Steuerberatungsgesellschaft
Organization unit: Intranet
State / Province: Bayern
Locality: Muenchen
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:62:b5:30:00:f9:5f:47:c8:c5:98:30:25:58:3f:d3
Serial Number (int): 58998551826064245630484319459916398547
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 01:61:30:ef:ec:d7:e6:2f:e1:7d:29:ac:fc:be:b0:ca:3a:8f:95:52
Fingerprint (sha256): 15:97:68:c1:34:f1:9a:2c:a5:d1:89:f6:f2:04:e3:39:4f:f8:44:ec:c4:28:63:b7:c4:5f:26:5e:ef:ee:b7:da

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate www.intranet.wts-global.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.intranet.wts-global.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.intranet.wts-global.com

Other certificates including the domain name wts-global.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.intranet.wts-global.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58998551826064245630484319459916398547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'WTS Group Aktiengesellschaft Steuerberatungsgesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Intranet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.intranet.wts-global.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861299457464332680944247741074709459797170973531915560383923671168571408125029103477174507314289395156249996422483727092640078063186275508153651871727449453712919032219767952083583338268536953140198063094084558890142901175767204572670539402150110841651804795446125309154172627994789770310882715348007454671802551865960830753796408111896743091051402632682283541344605316316447399044448976900126429694593558789476638200692883875559409682196957574770338333581962130255927701681248214617340625021407385846676322105552270160817191024831282161314576939516161199569469385894108758970370157888810584001949066421935248862391526790118280181746466926134722399209128636108731699556665318867194157380998965974935192605659253194096267073117193558409797977812970331714006195087271794246945752324976443730825996717075421697554587516026483117953244365602677952982048989998753135632969890969146760524955402892008442771300042357302250498845659684517976522276994868853022949780052231063884319854062782294989224222493561757536126365546213689658620530218546331856060694025971890925592510565161665057735970696885147413568480713560768038977004501715236790405234203933569490621199799315949623359134483358090559314007475252721315059298284210010912968919548723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.wts-global.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							01dd007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015fe98024b40000040300473045022100dce1880eefbbb6d99c5a593dc59df6f14462d4d0128d532279689c639beb1b130220731f5509fee0f92f5987c049e10f1babd555b0b03b14fa13a2b1ac1694b3e439007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015fe98024e40000040300463044022037c6589d80b6bbb816a60bb85fa79eaba92112a635622686450efcec647f13eb02202410c61cbe09c2e73e18fb6c33bb1b06531d58de22c238907163629f9bff1a21007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015fe98026b0000004030046304402207c99c6e5945859e52c5dd77d3f5ca17d5105bdae330961b30eee93e9eb194789022053ebc198cff7a149851a49255eae5e8b845b79c1b69498884cba138e6c28b0f1007500bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015fe98025d200000403004630440220184b9f545f005f2cabdd4623812804341875405a8333c9b19bdce989343d2ceb022006851eb5d1e6bf8bead92f2b6bc8500f2df518c754c923a809986130da1dd9db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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