www.gentechnologiebericht.de

- Berlin-Brandenburgische Akademie der Wissenschaften -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:33:1c:b0:4d:34:ce:b0:13:c1:93:66 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Berlin-Brandenburgische Akademie der Wissenschaften

Organization: Berlin-Brandenburgische Akademie der Wissenschaften
Organization unit: Informationstechnologie
State / Province: Berlin
Locality: Berlin
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:33:1c:b0:4d:34:ce:b0:13:c1:93:66
Serial Number (int): 9965311009535164305400501094
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: b9:d6:42:67:5a:47:57:95:f4:9d:f8:bb:0a:78:2b:1d:cf:b6:21:49
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): e7:67:0b:52:f3:a7:76:d5:ae:78:84:99:24:78:b7:19:b0:ab:15:12
Fingerprint (sha256): 16:b7:6e:a2:89:7d:f1:af:3d:fe:3d:45:45:31:8f:2f:9b:f6:62:58:db:05:ea:52:f6:84:97:15:c6:4f:ea:3c

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.gentechnologiebericht.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gentechnologiebericht.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gentechnologiebericht.bbaw.de
gentechnologiebericht.de
metadatenbank.gentechnologiebericht.de
www.gentechnologiebericht.de

Other certificates including the domain name gentechnologiebericht.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gentechnologiebericht.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9965311009535164305400501094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 12:16:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-17 12:16:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin-Brandenburgische Akademie der Wissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnologie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.gentechnologiebericht.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852470691640879145581389688150264972195736504747525334519043462752751335627883768303409879944319583064031834266680959202999466861708423302255375553546526529576997173079529085916387501286206011163534095022208648128983990286950006918820902171870266945730333102187359473554814527002255091520444193937582331841839981822290342172541354462446421687150725952782556720235523316090207929594507186131910823801133727819596412835021395801746026048079274175900764239492588044069486035766653032715605921739323421129563397163634378035710830630766936796357668236014812400957218350134487775143683318797920957257632377583654399015062792423592828110256245310608705444977397878942361390185648311609411605931229098354394216845887219156236859068630151077214597041752630506320367653555431304347875050476273268994418550643121878996994237597715577214889626620194637224181873597123934951848030214777726250523949175014403278504013428107944149608474179432075598394848324717582424497265865302022216509951316991680046285205499603338954644638095901852142513312463391509078846809805830740991312566207278159405909685815637652422240630485167448031839580980916547307879623039877615065942916217006830538924727235612184634271343881940505690297993901807981775755130898117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9d642675a475795f49df8bb0a782b1dcfb62149
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentechnologiebericht.bbaw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentechnologiebericht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metadatenbank.gentechnologiebericht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gentechnologiebericht.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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