dms21-kil.intern.ekom21.de

- ekom21 - KGRZ Hessen K.d.oe.R. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 57:8a:12:56:2f:2c:0f:d3:47:0f:8c:e3 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ekom21 - KGRZ Hessen K.d.oe.R.

Organization: ekom21 - KGRZ Hessen K.d.oe.R.
State / Province: Hessen
Locality: Giessen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 57:8a:12:56:2f:2c:0f:d3:47:0f:8c:e3
Serial Number (int): 27092114209979631016663289059
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: aa:a9:57:e2:91:01:49:ee:69:02:70:3c:36:ad:f2:71:e6:bc:5e:da
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): aa:63:cd:bc:6c:c0:6b:e5:ea:4f:a3:ea:16:0d:a3:eb:4a:c5:ce:34
Fingerprint (sha256): 16:d5:33:c6:a9:ad:6d:86:03:87:f7:0f:5d:68:78:5f:70:2d:fd:f0:39:35:e7:11:80:5c:6e:19:93:2b:f2:c2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate dms21-kil.intern.ekom21.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dms21-kil.intern.ekom21.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dms21-kil.intern.ekom21.de

Other certificates including the domain name ekom21.de

(limited to 100 certificates)
*.rwf-prod.intern.ekom21.de
memcg.ekom21.de
openwebfm-khr.intern.ekom21.de
*.ekom21.de
portal-civ-test.ekom21.de
domicil21-mz.intern.ekom21.de
nala.intern.ekom21.de
wkz.ekom21.de
wlan.ekom21.de
portal-civ-test.ekom21.de
ecm21.intern.ekom21.de
domicil21-mz.intern.ekom21.de
kis.intern.ekom21.de
webmail.ekom21.de
vvd.ekom21.de
hedocsv37.intern.ekom21.de
aqb.ekom21.de
oos.ekom21.de
owi21togo.intern.ekom21.de
adt.ekom21.de
loga-bd-prod-lai.intern.ekom21.de
*.rwf-qs.intern.ekom21.de
civ-hel.intern.ekom21.de
webkita-zelv-qs.ekom21.de
*.ekom21.de
civ-demo.ekom21.de
svg21-qs.intern.ekom21.de
pushint.avisca.ekom21.de
bpm21-test.intern.ekom21.de
secure.ekom21.de
votemanager-hessen.ekom21.de
efinanz-oze-qs.ekom21.de
efinanz.intern.ekom21.de
www.ekom21.de
curalit21.intern.ekom21.de
openwebfm-kwf-qs.intern.ekom21.de
portal-cor.ekom21.de
hcme01.intern.ekom21.de
kis.intern.ekom21.de
vois-ekom21.intern.ekom21.de
portal-civ-qs.ekom21.de
stellen.ekom21.de
xewo21-webservice.intern.ekom21.de
gewerbe.ekom21.de
ecm21-qs.intern.ekom21.de
portal1.gast.ekom21.de
ema21-webservice.intern.ekom21.de
hcmc01.intern.ekom21.de
*.ekom21.de
fe21.intern.ekom21.de
gnhdbv3.ekom21.de
dms21-kil.intern.ekom21.de
adt.ekom21.de
www.shop.ekom21.de
rim.ekom21.de
bpm21.intern.ekom21.de
adt21qs.intern.ekom21.de
www.shop.ekom21.de
domicil21.intern.ekom21.de
ozg.ekom21.de
zeit21.ekom21.de
domicil21-mz-qs.intern.ekom21.de
portal-civ-hel-qs.ekom21.de
citrix.lwv.ekom21.de
esina21.intern.ekom21.de
fe21.intern.ekom21.de
civ-hzd-qs.intern.ekom21.de
portal-civ-hel-qs.ekom21.de
kundenzufriedenheit-itops.ekom21.de
webkita.ekom21.de
zema21.intern.ekom21.de
teamsites.ekom21.de
prm21-qs.intern.ekom21.de
antragsportal-fm.ekom21.de
migewa.ekom21.de
fe21reports.intern.ekom21.de
zaehlerportal-civ.ekom21.de
owi21oa.ekom21.de
kai2web.intern.ekom21.de
loga-bd-prod.intern.ekom21.de
fernwartung.ekom21.de
owi21oa.ekom21.de
kis-dev.intern.ekom21.de
vois-spiegel.intern.ekom21.de
zema21.intern.ekom21.de
zeit21.ekom21.de
ebot-qs.ekom21.de
sozabis-anwtest.lwv.ekom21.de
portal-civ.ekom21.de
citrix21.ekom21.de
webmail.ekom21.de
tevis-qs.ekom21.de
dvdv-he.ekom21.de
zda.intern.ekom21.de
zeit21-qs.intern.ekom21.de
prm21.intern.ekom21.de
logaweb-pro9.intern.ekom21.de
civento21zm.intern.ekom21.de
*.ekom21.de
fe21-qs.intern.ekom21.de

Certificate

The complete raw certificate details for dms21-kil.intern.ekom21.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27092114209979631016663289059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 15:41:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-04 15:41:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Giessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekom21 - KGRZ Hessen K.d.oe.R.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dms21-kil.intern.ekom21.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789590851252777736603876380587639901027741859709155099254646255848729088773870056999009965103720970184614546574932283091196579358731539549184803654177338505037245278551110427511321678146493622984194261651069564794570708150932810200697950248265464376759912503050827039076262224336420439461781547148979816349407928502994413277052218645593597673549331722298448236533871824992967481063305425599593834749664073296287695931713605713406321104817270630961018808556734506321029315103160631654034358757912408154537222031210713998567634514993522623400029102026016890672534922988363800761148018888337896461449889234003488112237779451345956545664209430368626106344951966351790617979862744108803222279746908135670475957646228567304969015847187781976026963175618367489544284575599383871345368299574743383549816586016963724535222583292955190754655559440746176326910867585423863457356980830502077659793701653657987920850353157418489206800527096323480575850001523477086783187603136554704022208790248484686265365024840088863934529634892905312785135560323202819194312631530169022043954007521674234219697863765517693919734994771617625529878222457092922096839754384520171756055715497809773754024718962296719157984026735996125320297090336097220427424473199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms21-kil.intern.ekom21.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaa957e2910149ee6902703c36adf271e6bc5eda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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