bewerbung.mannheim.de

Issued by thawte DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 06:e6:ef:93:b6:8c:86:a6:fd:33:2f:49:a2:8e:1c:67 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=bewerbung.mannheim.de

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:e6:ef:93:b6:8c:86:a6:fd:33:2f:49:a2:8e:1c:67
Serial Number (int): 9174455451103825217817856030748318823
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 7d:29:31:2f:c1:1e:6e:ae:31:05:6a:b3:eb:1c:cd:a9:dd:ae:80:9a

Fingerprint (sha1): 37:fc:76:fa:d5:36:8c:61:0d:43:b8:99:0b:e1:45:23:a7:81:9d:6a
Fingerprint (sha256): 1e:a0:ca:90:9f:36:f3:7a:b1:6a:b0:fa:56:da:ae:b6:9b:bb:e1:da:c6:60:14:b2:3e:6b:32:99:32:d1:e9:a9

Issuing Certificate URL: http://tm.symcb.com/tm.crt

Revocation information

OCSP Server: http://tm.symcd.com
CRL Distribution Point: http://tm.symcb.com/tm.crl

Check the revocation status for certificate bewerbung.mannheim.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bewerbung.mannheim.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bewerbung.mannheim.de

Other certificates including the domain name mannheim.de

(limited to 100 certificates)
veranstaltungen.mannheim.de
red.mannheim.de
scope.mannheim.de
extern.mannheim.de
NBGstamanEXP-E1.mannheim.de
piwik.mannheim.de
web2.mannheim.de
mailings.konversion.mannheim.de
buergerinfo.mannheim.de
bewerbung.mannheim.de
www.mannheim.de
theater.mannheim.de
opendata.mannheim.de
www.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
mailings.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
bs.mannheim.de
veranstaltungen.mannheim.de
stadtarchiv.mannheim.de
*.mannheim.de
khria.mannheim.de
veranstaltungen.mannheim.de
gastwlan.mannheim.de
extern1.mannheim.de
www.mannheim.de
buergerinfo.mannheim.de
buergerinfo.mannheim.de
beteiligungshaushalt.mannheim.de
*.mannheim.de
svcloud.mannheim.de
bewerbung.mannheim.de
www.formular.mannheim.de
piwik.mannheim.de
*.mannheim.de
piwik.mannheim.de
katalog.mannheim.de
theater.mannheim.de
www.mannheim.de
www.formular.mannheim.de
www.mannheim.de
artup.mannheim.de
svcloud.mannheim.de
ccs.mannheim.de
piwik.mannheim.de
mdms.mannheim.de
katalog.mannheim.de
waehlenab18.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
mailings.konversion.mannheim.de
webco.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
web2.mannheim.de
www.mannheim.de
theater.mannheim.de
scope.mannheim.de
services.mannheim.de
piwik.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
stadtarchiv.mannheim.de
mailings.konversion.mannheim.de
web2.mannheim.de
bewerbung.mannheim.de
web2.mannheim.de
katalog.mannheim.de
NBGstamanEXP-E1.mannheim.de
services.mannheim.de
scope.mannheim.de
katalog.mannheim.de
mailings.konversion.mannheim.de
ccs.mannheim.de
veranstaltungen.mannheim.de
mailings.konversion.mannheim.de
theater.mannheim.de
mailings.konversion.mannheim.de
www5.mannheim.de
um.mannheim.de
formular.mannheim.de
katalog.mannheim.de
www.stadtarchiv.mannheim.de
umfrage.mannheim.de
bs.mannheim.de
bs.mannheim.de
bs.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
umfrage.mannheim.de
ccs.mannheim.de
extern.mannheim.de
svcsg50.mannheim.de
scope.mannheim.de
bs.mannheim.de
mailings.konversion.mannheim.de
katalog.mannheim.de
fuehrerschein.mannheim.de

Certificate

The complete raw certificate details for bewerbung.mannheim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9174455451103825217817856030748318823
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bewerbung.mannheim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772820305774444754031639900685351427861085779894220563676098430403593581184053284810540928660044337057341229800112856905306321852225899380665672728640175579585358842194090690635996106969285137447189319452119946979099068974758685257883014755266238388854161371552918327047160792915614615606666911778298701060163097521399725129583362663156184155560418624789449167635087902044845354140117147144135631304576968835513723809174003951340288509118038569446291129432966183304821509811815180500412442342474656371664870320932879603297686829223399138168945023018234891355285639734195079261318564348562572675343568889372912227651391525335516379722412087782709457317397753223725332193981537101811099171452257826307544018529483523099661478317661445209068410460569466086780306964077176263152124362010636798272344524219196369144258534553965087375643316855876459988172498577290314672444459249635326290412155091843248447396892514195732302922649374778619767782375789843730174715903259949890199523387242763668048485911920003144024625566434805774932716860300327151484579798891404818091637516990013398799952776011596056737165418604462776143114177762894711585103794608066701841449889909037095924202674167269258090152681930061682076857233619562414191389441461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewerbung.mannheim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d29312fc11e6eae31056ab3eb1ccda9ddae809a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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