www.springer.com

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 4f:2d:e3:71:4d:d5:19:77:31:ac:9c:c2:e0:c5:b7:eb was issued on by TERENA.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.springer.com,OU=Domain Control Validated

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:2d:e3:71:4d:d5:19:77:31:ac:9c:c2:e0:c5:b7:eb
Serial Number (int): 105247278109492781457466525176719325163
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d4:fe:ab:90:a6:e3:eb:65:c8:12:ae:b5:30:9e:5c:0d:73:8d:b5:b5
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): e9:b2:d9:19:0a:92:c1:d2:87:46:ac:17:33:47:ca:99:7b:24:8e:d6
Fingerprint (sha256): 1a:1d:31:71:b0:c4:d1:8a:ac:67:19:1e:2e:58:cf:06:e2:e4:fc:c4:23:5b:85:5f:76:fc:b5:21:c3:bb:3e:2b

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate www.springer.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.springer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.springer.com
admin.springer.com
checkout.springer.com
images.springer.com
preview.springer.com
static.springer.com

Other certificates including the domain name springer.com

(limited to 100 certificates)
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
www.3scale.net
springer2.map.fastly.net
adwizard.springer.com
springer2.map.fastly.net
fdus-51.freshdesk.com
lehrbuch-psychologie.springer.com
www.3scale.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1e.map.fastly.net
*.springer.com
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
*.springer.com
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
www.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
oda.springer.com
springer2.map.fastly.net
oda.springer.com
support13.cdnetworks.net
springer2.map.fastly.net
*.springer.com
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
fdus-51.freshdesk.com
*.springer.com
dns-vetting2.map.fastly.net
mailings.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
*.springer.com
springer2.map.fastly.net
springer2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
springer2.map.fastly.net
support13.cdnetworks.net
ict.kolibrie.nl
akamai-cn.springer.com
i.ssl.fastly.net
www.3scale.net
i.ssl.fastly.net
support13.cdnetworks.net
support13.cdnetworks.net
ftps.springer.com
dns-vetting1i.map.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
akamai-cn.springer.com
support13.cdnetworks.net
support13.cdnetworks.net
dns-vetting2.map.fastly.net
springer.com
www.springer.com
*.springer.com
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
i.ssl.fastly.net
support13.cdnetworks.net
dns-vetting1i.map.fastly.net
dns-vetting2.map.fastly.net
ict.kolibrie.nl
springer2.map.fastly.net
support13.cdnetworks.net
i.ssl.fastly.net
dns-vetting1e.map.fastly.net
support13.cdnetworks.net
www.springer.com
*.springer.com

Certificate

The complete raw certificate details for www.springer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9vZvAS5SSiHkM8Ggwc2
3li+al4AQaWsXWJS5lmSwKMQbiKrI878vnkOEmT9YETHOZBSukuuTFxXPJtsYwxk
dw2lFqzlBw1QXEIRwYHOsfqhM7NslFnQKL0ayPgegsFVhXgpGbUBIr8bX5YFSlGg
ecnpXBFSUqv7X8veMTfwJaIt2cX9ufgy7k+5U6bxWNfuiQjdNg08+6asuTEuQNxT
mC6qFNytHO8UPmhViV6+uqXnDnKKqTidq8yWPdBcXl+XR1qkgHHbDwqUzijLDHmS
YdI1JqZFdlDL6oRs4HgFYuht8tKgNKi4wc+qvoLLSwnz2wq4arkDT5b3HhP+q/3g
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105247278109492781457466525176719325163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.springer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20180302824154546095441189560684277919135012374549302480830551457772481922610280209700752660642707414693665150074965173632794979662123353433686748634333743845818496824128109589271400749129413923015982895213205807069913883927307394990702262515414339594179265178303112073190163453535021241809562863319659392022231963278911300236445000434225668718866968013636264226688952991730072912022962200107799727464434693344566392226469417111883660899216877981271729580745135158630822230606160073988038248394849817666955554705104292476270701184035055045199936120270478824032172749375621585259589425071970070546154027264883277291577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4feab90a6e3eb65c812aeb5309e5c0d738db5b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.springer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.springer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.springer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.springer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.springer.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a9ef6c8d360f9f92c064ea7fd0cc24d234d1f0c202ff3d0fee91be8ceafe6e480a47c31cbade6ddf676d80d49bfe794026413ee7b12b1867d8648d59a44e2875835417c427ce2830d25253197f626e197850fd259baa08a939fe11ac834546193ae78fef30149d9daa810b27bed6ed1dd5fa461aee49f75152b791d4be1ffbe452e29321d024dd5693943e51ac9aedeeb4f08d94cf1692d5f545bb77166d385a8396e56ddc8b51dbab667a4d3262fab14873aa1dda188b80e23885e7003a91993113e79db9e4caeacc92319e16f7d0c0612658a8d58db4fe06ba0693a55d9b3c830bfcbc86e39a9ae17f771aa6869b5351cfc3b671121eb55b12118a7f4804b7