ticket.bregenzerfestspiele.com

- Bregenzer Festspiele GmbH -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 61:8c:79:ec:07:8c:1a:20:9c:8f:e2:02:c4:dc:c5:1e was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bregenzer Festspiele GmbH

Organization: Bregenzer Festspiele GmbH
State / Province: Vorarlberg
Locality: Bregenz
Country: AT

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 61:8c:79:ec:07:8c:1a:20:9c:8f:e2:02:c4:dc:c5:1e
Serial Number (int): 129664510023075878824769836655182660894
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 08:15:f4:e1:7f:57:94:8a:d9:5f:13:ff:a4:ab:63:cf:74:d9:6d:bd
Fingerprint (sha256): 18:49:07:89:8f:1e:8d:43:f7:43:43:23:31:d8:59:ca:84:b7:97:60:0d:f2:29:05:5c:50:7d:78:ff:0a:16:b2

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate ticket.bregenzerfestspiele.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticket.bregenzerfestspiele.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticket.bregenzerfestspiele.com

Other certificates including the domain name bregenzerfestspiele.com

(limited to 100 certificates)
magazine.kueche-co.de
magazin.rollstuhlsport.de
magazine.kueche-co.de
digital.industrielle-automation.net
webkiosk.con-nexi.de
magazine.kueche-co.de
magazine.kueche-co.de
digital.derbetriebsleiter.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
kiosk.laloupe.com
kiosk.miles-magazine.be
digital.derkonstrukteur.de
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.miles-magazine.be
kiosk.laloupe.com
magazine.kueche-co.de
magazine.kueche-co.de
epaper.immosale24.net
kiosk.laloupe.com
kiosk.laloupe.com
digital.foerdern-und-heben.de
digital.derbetriebsleiter.de
magazin.rollstuhlsport.de
epaper.krombacher.de
magazine.kueche-co.de
digital.derbetriebsleiter.de
magazine.kueche-co.de
epaper.immosale24.net
digital.derbetriebsleiter.de
*.bregenzerfestspiele.com
magazine.kueche-co.de
ticket.bregenzerfestspiele.com
magazin.rollstuhlsport.de
webkiosk.con-nexi.de
magazine.kueche-co.de
magazine.kueche-co.de
digital.derbetriebsleiter.de
kiosk.miles-magazine.be
magazine.kueche-co.de
magazine.kueche-co.de
magazine.kueche-co.de
magazine.kueche-co.de
bibliothek.bregenzerfestspiele.com
kiosk.laloupe.com
kiosk.miles-magazine.be
magazine.kueche-co.de
magazine.kueche-co.de
epaper.krombacher.de
kiosk.miles-magazine.be
magazin.rollstuhlsport.de
magazine.kueche-co.de
webkiosk.con-nexi.de
kiosk.miles-magazine.be
ticket.bregenzerfestspiele.com
digital.foerdern-und-heben.de
kiosk.laloupe.com
digital.derkonstrukteur.de
digital.derkonstrukteur.de
kiosk.laloupe.com
magazine.kueche-co.de
kiosk.miles-magazine.be
bibliothek.bregenzerfestspiele.com
digital.foerdern-und-heben.de
magazine.kueche-co.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
ticket.bregenzerfestspiele.com
*.bregenzerfestspiele.com
webkiosk.con-nexi.de
kiosk.miles-magazine.be
*.bregenzerfestspiele.com
kiosk.laloupe.com
magazine.kueche-co.de
magazine.kueche-co.de
digital.industrielle-automation.net
digital.foerdern-und-heben.de
kiosk.laloupe.com
epaper.immosale24.net
kiosk.miles-magazine.be
epaper.immosale24.net
kiosk.miles-magazine.be
magazine.kueche-co.de
magazine.kueche-co.de
digital.derkonstrukteur.de
webkiosk.con-nexi.de
magazine.kueche-co.de
bibliothek.bregenzerfestspiele.com
webkiosk.con-nexi.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
webkiosk.con-nexi.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
digital.derbetriebsleiter.de
magazin.rollstuhlsport.de
epaper.immosale24.net
digital.derbetriebsleiter.de
magazine.kueche-co.de

Certificate

The complete raw certificate details for ticket.bregenzerfestspiele.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vTXBmomzhxD2ue5bsjq
9InRlacXEByqJjerBjjvEBDKP/sIdys0/8VHVUbDqn/mdEmigPM1mhQYTvJE7S77
ZUHPlAHl/Y7A0fyEVVXn/mh4kokfd3gu1b0HZKKGs3FdTnvw8pX2jfpKEZxrkFjc
9XO/8HyNxt3sQYDC0TP8+fAQxzKTBfqjf2gOewOTZzcjlufuNiUMGGmBxkidkEPY
wYLTyZLCLTWpTM7QdLWCNYhqXSRxcKHxbgEh26dG7H8T/ZCQxXu0ks2h/5Et9uXg
/aCs//br8iPisJ2xfH5FTx9WTu/4q9EK44Hv6cZgCCoTGlnJzWS0OoI+t8SM/ycq
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129664510023075878824769836655182660894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vorarlberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bregenz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bregenzer Festspiele GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ticket.bregenzerfestspiele.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27135732337812101723053922139821505285405692680154443233421992276760042005332489843522778336235938668154057257246000260654509624844448788455987282648631427120743617985218654930095590681426102129278817503209094208423850619733076008679964567073155233011732496274899136210945835845454528611750488738307235762830368273971891252443652483843529577039045465369518287195722497517445976359360393290031470305367237375520959321034725873679896901837130161815546415750047677039714961591405895507751136392410692418502272472573746737381207274454395815468805620425810708887774119775156812771257668646091541748864572489461388682930749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.bregenzerfestspiele.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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