*.karlsruhe.de

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 48:14:27:c7:43:35:1c:e4:f8:d6:28:a0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.karlsruhe.de,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:14:27:c7:43:35:1c:e4:f8:d6:28:a0
Serial Number (int): 22307287071566848860102207648
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d8:4f:24:9e:30:93:8b:52:79:e7:a7:b2:97:aa:f4:3d:8b:28:96:e7
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 0b:75:6a:c5:ac:ac:19:16:87:f9:d6:49:8d:3f:ba:71:4c:a7:e5:57
Fingerprint (sha256): 1e:d4:c3:f3:53:c9:4e:2b:38:48:9a:5a:82:29:c2:01:83:9d:d5:0d:66:78:fc:43:91:e8:b4:20:36:08:78:a3

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.karlsruhe.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.karlsruhe.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.karlsruhe.de
karlsruhe.de

Other certificates including the domain name karlsruhe.de

(limited to 100 certificates)
m.karlsruhe.de
matrix-seg.karlsruhe.de
www1.karlsruhe.de
*.hhs.karlsruhe.de
presse.karlsruhe.de
matrix-seg.karlsruhe.de
lernfabrik.karlsruhe.de
www.carl-benz-schule.de
*.cbs.karlsruhe.de
moodle.cbs.karlsruhe.de
wettbewerbe.karlsruhe.de
www.carl-benz-schule.de
wes.karlsruhe.de
www.karlsruhe.de
www.karlsruhe.de
wes.karlsruhe.de
www.mgg.karlsruhe.de
owncloud.mgg.karlsruhe.de
ces.karlsruhe.de
*.hms.karlsruhe.de
web1.karlsruhe.de
*.karlsruhe.de
www.staatstheater.karlsruhe.de
www1.karlsruhe.de
dienste.karlsruhe.de
kita.karlsruhe.de
*.staatstheater.karlsruhe.de
wes.karlsruhe.de
mail2.karlsruhe.de
transparenz.karlsruhe.de
otv.karlsruhe.de
*.list.karlsruhe.de
hms.karlsruhe.de
moodle.cbs.karlsruhe.de
moodle.ess.karlsruhe.de
kita.karlsruhe.de
ces.karlsruhe.de
*.ces.karlsruhe.de
*.karlsruhe.de
*.staatstheater.karlsruhe.de
wes.karlsruhe.de
kita.karlsruhe.de
formulare.karlsruhe.de
bekrujzq.web.belwue.de
wes.karlsruhe.de
cloud.mgg.karlsruhe.de
www.karlsruhe.de
huebsch.karlsruhe.de
cloud.mgg.karlsruhe.de
kalender.karlsruhe.de
cloud.staatstheater.karlsruhe.de
groupwise.hhs.karlsruhe.de
*.karlsruhe.de
*.cbs.karlsruhe.de
filr.ces.karlsruhe.de
geodaten.karlsruhe.de
web1.karlsruhe.de
ess.karlsruhe.de
*.staatstheater.karlsruhe.de
lernfabrik.karlsruhe.de
lernfabrik.karlsruhe.de
matrix-seg.karlsruhe.de
opac.karlsruhe.de
wes.karlsruhe.de
otv.karlsruhe.de
cloud.mgg.karlsruhe.de
*.karlsruhe.de
rhin.karlsruhe.de
moodlex.hhs.karlsruhe.de
lernfabrik.karlsruhe.de
otv.karlsruhe.de
www.staatstheater.karlsruhe.de
moodle.hhs.karlsruhe.de
*.karlsruhe.de
web3.karlsruhe.de
wettbewerbe.karlsruhe.de
moodlex.hhs.karlsruhe.de
dienste.karlsruhe.de
*.hhs.karlsruhe.de
opac.karlsruhe.de
formulare.karlsruhe.de
moodle.ess.karlsruhe.de
wes.karlsruhe.de
lernfabrik.karlsruhe.de
as.staatstheater.karlsruhe.de
matrix-seg2.karlsruhe.de
dienste.karlsruhe.de
moodle.cbs.karlsruhe.de
opac.karlsruhe.de
matrix-mdm.karlsruhe.de
outlook.vbk-online.de
*.hms.karlsruhe.de
*.hhs.karlsruhe.de
wes.karlsruhe.de
kalender.karlsruhe.de
*.karlsruhe.de
*.hhs.karlsruhe.de
www.staatstheater.karlsruhe.de
heimstiftung.karlsruhe.de
formulare.karlsruhe.de

Certificate

The complete raw certificate details for *.karlsruhe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2ZX+w6UuShRgHJGN4c2
xcZq6j0ANG/r51vGJJgHztopXz9Wd//aEfl0L6eMlTLe/k5cYAYGkhH9ZzP+dPf5
KYz0UyZb7LUCyEhzWQ6wMFSQZfOA/Fqy1t+TQw4B/f4o2EJD3Z7NKlD2DwNox+KL
o7S19g56Lc1bttosL2cu/NA64GfxabzoL7/cMVjWvzFPueQvp+OU8VYtQBThtSNa
w8GpyzbQYNNimaYU3oF7t1DLV4JFy1USYSsl4PcU/8+MXs4tbPCU2CqBWLM7QV9H
FuTMN8HUrCUvtawLkJyh2o5mry3Sb9Sq8Pa5UOxFTGxd6C2CUZlES/ykJ/Ifh3SL
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22307287071566848860102207648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-01 12:25:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-02 12:25:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.karlsruhe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21637217696080260631812452755104344816567141334370016372037161824214159095369346320658714454289051577987286457635343799005225110362873424836666447652058750702802093406139938319215590036061929300298868100750212845803347670774170398297885819799233167958004927237619844089991241893257922523333200743752904704891858934408974525730995075531085747373466757126847885366537288319216959390775506833431392248839275158781935515687643709017725456071399919988811589603238143519924689726285212603934663859653316991091054306893371045242494071994352686645038416983246661894468506423996128939484517485069887225742479832410766133463903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karlsruhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d84f249e30938b5279e7a7b297aaf43d8b2896e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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