*.yumpu.com

- i-magazine AG -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 43:f1:7f:49:e0:06:de:00:15:fd:51:0d:a8:7b:b9:e2 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

i-magazine AG

Organization: i-magazine AG
Organization unit: Online-Marketing
State / Province: St. Gallen
Locality: Diepoldsau
Country: CH

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:f1:7f:49:e0:06:de:00:15:fd:51:0d:a8:7b:b9:e2
Serial Number (int): 90312200979504728368314100277390850530
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): 98:9c:9b:e9:80:9f:0d:40:1f:bf:93:82:11:a9:41:35:a6:69:84:e1
Fingerprint (sha256): 17:38:d2:05:42:6a:a8:62:06:10:de:9a:bc:7a:76:a6:33:bb:eb:f3:06:28:c7:69:33:61:33:d8:7d:0c:b0:a7

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate *.yumpu.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.yumpu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.yumpu.com
yumpu.com

Other certificates including the domain name yumpu.com

(limited to 100 certificates)
yumpu.com
images.emms.com
features.yumpu.com
kiosk.laloupe.com
cd2.chargebee.com
cd2.chargebee.com
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.laloupe.com
aar-saas.yumpu.com
kiosk.laloupe.com
cd2.chargebee.com
ssl.yumpu.com
kiosk.laloupe.com
kiosk.laloupe.com
ng.yumpu.com
kiosk.laloupe.com
kiosk.laloupe.com
i.ab-auf-das-schiff.de
developers.yumpu.com
developers.yumpu.com
kiosk.laloupe.com
developers.yumpu.com
yumpu.com
tennis.yumpu100.com
ssl.yumpu.com
tennis.yumpu100.com
cd2.chargebee.com
tennis.yumpu100.com
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.laloupe.com
tennis.yumpu100.com
blog.yumpu.com
tennis.yumpu100.com
features.yumpu.com
cd2.chargebee.com
ssl.yumpu.com
en.blog.yumpu.com
kiosk.laloupe.com
ng.yumpu.com
developers.yumpu.com
yumpu.com
cd2.chargebee.com
tennis.yumpu100.com
dev-kiosk-documents.yumpu.com
developers.yumpu.com
ssl.yumpu.com
kiosk.laloupe.com
ssl.yumpu.com
*.yumpu.com
ssl.yumpu.com
ssl.yumpu.com
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.laloupe.com
ssl.yumpu.com
developers.yumpu.com
cd2.chargebee.com
dev-kiosk-api.yumpu.com
ssl.yumpu.com
kiosk.laloupe.com
*.yumpu.com
kiosk.laloupe.com
tennis.yumpu100.com
ssl.yumpu.com
kiosk.laloupe.com
co.yumpu.com
kiosk.laloupe.com
ssl.yumpu.com
ssl.yumpu.com
developers.yumpu.com
cd2.chargebee.com
cd2.chargebee.com
kiosk.laloupe.com
kiosk.laloupe.com
ssl.yumpu.com
kiosk.laloupe.com
cd2.chargebee.com
tennis.yumpu100.com
tennis.yumpu100.com
tennis.yumpu100.com
kiosk.laloupe.com
features.yumpu.com
developers.yumpu.com
ssl.yumpu.com
tennis.yumpu100.com
ssl.yumpu.com
kiosk.laloupe.com
ssl.yumpu.com
cd2.chargebee.com
www.developers.yumpu.com
cd2.chargebee.com
*.yumpu.com
tennis.yumpu100.com
kiosk.laloupe.com
kiosk.laloupe.com
tennis.yumpu100.com
developers.yumpu.com

Certificate

The complete raw certificate details for *.yumpu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1gfZ737HDAsLHEKScLx
r+g/2aKArnGUJpGRPJ932qryiOhrb1l5vhIb1OClcMDEOoAMCjy6gLMbn/2FkFgD
ZaFI2atuwSKwKQpLwLZGsnFVPTmRqGA5GjSu63ZsHfA0vZpqevvoPeTpCR7XiqTC
14YqnlRmUzlqo2AzkLup/yJPFKFNerkvW5+lYTR8r/M3KLml6F/FWtY7sVvzzrY9
ZiJMDpXW4NV1uX4La9wVw3rxQt+h6FQ7Sr9fUD/lU5oxwfYoNTce98WDrae3SnEL
q4W02RWFCJz+fr8bANEpMNrXIkYRaJn0+HXUKKD9N7FmzF/0/iJ9jKrujUpUQTYa
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90312200979504728368314100277390850530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'St. Gallen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Diepoldsau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'i-magazine AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Online-Marketing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.yumpu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23145064720270536857325309661284065021684226415588936691539420379243245543775904193079375151305548567082149379544790788980779700762498444846106715499081635113006705091531727453375469130856108831706926169897838662370558538700556348040439419894325618120553027087006785048974769528476298608402736254592230117631984549076880026245141664382154252800999528976645198809440781429185063335424779184094819810718093183536157872498563191696748981850278280870627790405942888132971253954501521420412406493261810943969178294621294013699211832132465908167116847057547535481009312399996223829942730131846764047343529262671917586193011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yumpu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumpu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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