www.tz-terraristik.de

- Karsten Mehnert -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 1a:40:d7:f5:55:7d:59:84:81:f7:82:8b:f8:5a:f7:ce was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Karsten Mehnert

Organization: Karsten Mehnert
Organization unit: eCommerce
State / Province: Niedersachsen
Locality: Cappeln (Oldenburg)
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:40:d7:f5:55:7d:59:84:81:f7:82:8b:f8:5a:f7:ce
Serial Number (int): 34896615044776407064847244514001876942
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 4e:df:6d:50:ca:67:09:23:91:01:4a:61:28:47:7c:f0:46:a4:02:5a
Fingerprint (sha256): 1c:1d:07:3b:77:7f:91:60:7f:b3:d2:83:7f:ed:d3:87:c7:6d:57:bd:34:fd:9d:ad:52:68:73:41:ab:a0:9b:c9

Issuing Certificate URL: http://gb.symcb.com/gb.crt

Revocation information

OCSP Server: http://gb.symcd.com
CRL Distribution Point: http://gb.symcb.com/gb.crl

Check the revocation status for certificate www.tz-terraristik.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tz-terraristik.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tz-terraristik.de
tz-terraristik.de

Other certificates including the domain name tz-terraristik.de

(limited to 100 certificates)
www.tz-terraristik.de
www.tz-terraristik.de
www.tz-terraristik.de
www.tz-terraristik.de
www.tz-terraristik.de
tz-terraristik.de
www.tz-terraristik.de
www.tz-terraristik.de
tz-terraristik.de
tz-terraristik.de
www.tz-terraristik.de
www.tz-terraristik.de

Certificate

The complete raw certificate details for www.tz-terraristik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxm4HmUctFmRpddHNbuQ5
q4Yda4G1YRBGmqu+7kQlcOj5CChSCalu6DZ99KsKJ5TNyePiyvQF9yn5zrIVU3Tz
Kt67ZttfImA2Kt+CxDXX8QiJmv2Qj1cWSY0WoUQWe0HjqGkvU9uJXWolpUNK7Md9
jdjffQtMSqXuCUuhu2drexWuB1RtC8J6aHwATCI6E7jMlAEbtu/LYRX3omyUozbM
VFfk0pSyFvkPgGuk/GfFnIe1aXMNMFMBWmDsvUlnPHMN03+9W+s/GMRsXdOAAlSJ
mDD1yyhd03kupkJbMVa6o3f73tc2fn1WsqGgPz/yV939G5pqUNqYWUuTzlue2Cyn
nb0Rgushccwul75aJPscwNbgKiwcb+NGd/YJh5GOwc9ciZ/PsWE9+EqdOnKZpoGj
9/1b6g0VZHsZQrwX7BJjWiFhNrgaXfXi2w+NLcAQ0BijsVS6JvM1Pp9pCGBJuTC+
M9Vbt5ZivFlqkElu4eY9tw5g1kYUWnQeTM0QZPP97nopSFoAhPg75NBDzeJtFF6i
LnI4U0Ubewr+33+wef/hpK5OIA7AzSkbjFvHMcOfM4UzIgBdNFToTVmexT6Bc5sA
Vk8T0ziN9LU4OkewVTUoPds8+4WIzaxj0ePTkpNTJFAGjKuRVn/a+V7MBNoXPgqC
Ft8H3ErAlzwqQl8lDUe3/0kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34896615044776407064847244514001876942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Cappeln (Oldenburg)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Karsten Mehnert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'eCommerce'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.tz-terraristik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809522970553425847463326957418693955123615556599845023949403157880904670204126938587690330840992231880746408180092521224011265342236562341851071724241497591330148580928614704800658499512629223451052623644447506304155432711221808002814707097454675032009504005806459003604717228536486073783017837354228114034290274409985636400886761667182387648772985186216636475118506867873284350821186225520384724243300620833507797391863914684308162859061610388942383009094846325804297882428194749210320398695809538725706677600142648227436232814299697696154249534158446451078480337735469994509835313267778544084814648987806180627847685335923794001693497570984180933059887847350512409180383603320462000028863211778515291520772674418701856760747690402350704880336001260384397868240088743353182319583821072783155186110663786070396128532241738569837980560480767645314436466282659680517202539103684727676299882606773908197476865705245774078060990458659816119600442187491066021759759513161999450955817754727404487393603395879271933918650612512617488772561155857904260241701260214504969261927775164037341404052308249331695836082097328368399619178650295034740867735495800866625093316561440134243929290972901946384976538607499919586205642160503220623291973449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tz-terraristik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tz-terraristik.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002641b353e519719a069911c1f11c0f2e88d65cdd826a0a72fe6947a243bee9cde0dc8457c5c52d2a6dde05d96be9e12bc557e43c0e5b135b49deafd4a7a6d800688b0882f003903f542d1f3317b291c01853b2cdd67bcb9bdd9c06c36969d151361b2fa9d47a8b93cf2e761c9e64d3f5aac49d4fdda4a7bfe9b8abcb04860c15e65bef51758dff4f48aec336332f1b88b28b03a50738c5a08d0177797d49ffaf900da884a04e2c5f056e34e56c6c8c0769d09755efad86df82d59fd5925dff113383af4a7ea7acf1c6d48c6d88d09f6a4b10b4e38c09014f2188a3501bccad6ae15e3a24988b1108f6b569cbb2d3f97e7aa8038c0a02ddb2f456a3184388b93a