webmail.cn.freudenberg-it.com

- Freudenberg IT GmbH & Co.KG -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 3b:d4:8f:5e:28:7a:b2:c2:61:ed:87:e9:ce:b7:d9:cd was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Freudenberg IT GmbH & Co.KG

Organization: Freudenberg IT GmbH & Co.KG
State / Province: Baden-Wuerttemberg
Locality: Weinheim
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:d4:8f:5e:28:7a:b2:c2:61:ed:87:e9:ce:b7:d9:cd
Serial Number (int): 79528126529867751998096974262631389645
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 2c:ff:8e:58:52:a3:67:59:10:01:d0:f5:ef:6d:fc:82:89:cc:b1:b7
Fingerprint (sha256): 1f:c2:a2:9d:b5:36:e3:3f:b2:4b:7c:b6:94:87:da:ba:f2:dd:a7:87:7a:f0:0b:02:d3:e2:c8:f0:15:a8:86:f3

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate webmail.cn.freudenberg-it.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.cn.freudenberg-it.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.cn.freudenberg-it.com

Other certificates including the domain name freudenberg-it.com

(limited to 100 certificates)
Webmail.whm.freudenberg-it.com
infomail.freudenberg-it.com
*.freudenberg-it.com
74.123.36.235
support.freudenberg-it.com
webmail.us.freudenberg-it.com
infomail.freudenberg-it.com
mdm.freudenberg-it.com
webmail.cn.freudenberg-it.com
www.freudenberg-it.com
fcm.freudenberg-it.com
sip.freudenberg.com
itsslvpn.freudenberg-it.com
sip.freudenberg.com
info.freudenberg-it.com
panopa-websap.freudenberg-it.com
webmail.cn.freudenberg-it.com
fitcustomer.freudenberg-it.com
downloads.freudenberg-it.com
webmail.cn.freudenberg-it.com
itsslvpn.freudenberg-it.com
www.var.freudenberg-it.com
pool2.freudenberg.com
info.freudenberg-it.com
fit-as-ssl-vpn.freudenberg-it.com
www.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
itsslvpn-ct.freudenberg-it.com
Itsslvpn.freudenberg-it.com
webmail.us.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
www.var.freudenberg-it.com
www.freudenberg-it.com
*.freudenberg-it.com
info.freudenberg-it.com
servicedesk-qa.freudenberg-it.com
itsslvpn.freudenberg-it.com
servicedesk.freudenberg-it.com
www.freudenberg-it.com
pool2.freudenberg.com
integrationtest.freudenberg-it.com
sip.freudenberg.com
*.freudenberg-it.com
panopa-websap-test.freudenberg-it.com
infomail.freudenberg-it.com
webmail.whm.freudenberg-it.com
*.freudenberg-it.com
itwlc240129-29.freudenberg-it.com
downloads.freudenberg-it.com
infomail.freudenberg-it.com
webmail.cn.freudenberg-it.com
info.freudenberg-it.com
webmail.whm.freudenberg-it.com
relay.freudenberg-it.com
Itsslvpn.freudenberg-it.com
panopa-websap.freudenberg-it.com
downloads.freudenberg-it.com
crossgate.freudenberg-it.com
fcm.freudenberg-it.com
webmail.cn.freudenberg-it.com
beapartoffit.freudenberg-it.com
*.freudenberg-it.com
www.freudenberg-it.com
aw.freudenberg-it.com
fitcustomer.freudenberg-it.com
fitdemoic1.freudenberg-it.com
itsslvpn-ct.freudenberg-it.com
info.freudenberg-it.com
integration.freudenberg-it.com
servicedesk-interface.freudenberg-it.com
info.freudenberg-it.com
businesscards.freudenberg-it.com
downloads.freudenberg-it.com
boextern.freudenberg-it.com
Webmail.whm.freudenberg-it.com
PoolEU1.freudenberg.com
*.freudenberg-it.com
pool1.freudenberg.com
mail.freudenberg-it.com
itsslvpn.freudenberg-it.com
info.freudenberg-it.com
beapartoffit.freudenberg-it.com
info.freudenberg-it.com
www.freudenberg-it.com
sip.freudenberg.com
PoolEU1.freudenberg.com
mob-erp-m4s.freudenberg-it.com
relay.freudenberg-it.com
Itsslvpn.freudenberg-it.com
www.var.freudenberg-it.com
infomail.freudenberg-it.com
downloads.freudenberg-it.com
webmail.us.freudenberg-it.com
fitcustomer.freudenberg-it.com
fcm.freudenberg-it.com
downloads.freudenberg-it.com
id.freudenberg-it.com
saperion-asp.freudenberg-it.com
downloads.freudenberg-it.com
info.freudenberg-it.com

Certificate

The complete raw certificate details for webmail.cn.freudenberg-it.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3BfJV8xnmHGixXpNBBW
grVCr2pzHq0NSHGIPJXu10uU61TOiwWPeM3BN07jf7jZnqv/g0xTbQi9RYwGBAU0
dmolyNH33MO/ZYxLMlrefob0kgUQDkbY/6rPEQeckxXqsOmz3V+lKxVu+XxfZTvP
ulCSkNfp00tGg0xPV3S9wwm25rcs94kPxMSxsgesVXP74e7V748WJ4yg3XGsXNCJ
1dKWz5w0TdlVzZQPx+iwl5qxdMSXhdIjSumHGfRDUW+clh3VtElHgAXsG33KkdY7
8bS1uEIEjWtVEMJk3yOxxEZjJ5JharVLcQXYghuMOyvWHaBpyo4CdFnO9uBP+l0m
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79528126529867751998096974262631389645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Weinheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Freudenberg IT GmbH & Co.KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webmail.cn.freudenberg-it.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24166928781288576272935516859221108478454824486270306642236098247513218452895359724560090900272225563365686179409875408727469565061403167884763070921377430021351555181237939271265482990207583977567641087662426823224780623761035221480301949631760814441280901893058870874087587098043278133052596419676779729209902110511914961287867772400595229011951984633624359253382620093106286947287254424363320435505784836078125342731983287592553291138025524552532703426797535643654103062022477510361590022486322800913190591279600621806029999351568817891759080838416732742195150337108945538822918007104940765794742155105177593259537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cn.freudenberg-it.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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