owi21oa.ekom21.de

- ekom21 - KGRZ Hessen K.d.oe.R. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 04:e2:9a:fc:b1:da:11:9d:a5:08:73:ef was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ekom21 - KGRZ Hessen K.d.oe.R.

Organization: ekom21 - KGRZ Hessen K.d.oe.R.
State / Province: Hessen
Locality: Giessen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e2:9a:fc:b1:da:11:9d:a5:08:73:ef
Serial Number (int): 1511889180351730026965136367
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 5c:41:62:5b:2e:bd:5d:77:3a:cc:fb:61:8b:50:b6:f3:59:15:4e:ef
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 29:d5:8b:8b:59:d9:79:66:29:8d:2b:ae:c0:40:bc:84:c7:ed:ae:e6
Fingerprint (sha256): 21:25:c1:db:cb:e3:82:c3:14:26:2d:4f:ac:f2:e2:46:fe:bc:12:ae:a2:a1:8d:75:92:47:d9:7d:1a:2f:77:23

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate owi21oa.ekom21.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owi21oa.ekom21.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owi21oa.ekom21.de

Other certificates including the domain name ekom21.de

(limited to 100 certificates)
*.rwf-prod.intern.ekom21.de
memcg.ekom21.de
openwebfm-khr.intern.ekom21.de
*.ekom21.de
portal-civ-test.ekom21.de
domicil21-mz.intern.ekom21.de
nala.intern.ekom21.de
wkz.ekom21.de
wlan.ekom21.de
portal-civ-test.ekom21.de
ecm21.intern.ekom21.de
domicil21-mz.intern.ekom21.de
kis.intern.ekom21.de
webmail.ekom21.de
vvd.ekom21.de
hedocsv37.intern.ekom21.de
aqb.ekom21.de
oos.ekom21.de
owi21togo.intern.ekom21.de
adt.ekom21.de
loga-bd-prod-lai.intern.ekom21.de
*.rwf-qs.intern.ekom21.de
civ-hel.intern.ekom21.de
webkita-zelv-qs.ekom21.de
*.ekom21.de
civ-demo.ekom21.de
pushint.avisca.ekom21.de
bpm21-test.intern.ekom21.de
secure.ekom21.de
votemanager-hessen.ekom21.de
efinanz-oze-qs.ekom21.de
efinanz.intern.ekom21.de
www.ekom21.de
curalit21.intern.ekom21.de
portal-cor.ekom21.de
hcme01.intern.ekom21.de
kis.intern.ekom21.de
vois-ekom21.intern.ekom21.de
portal-civ-qs.ekom21.de
stellen.ekom21.de
xewo21-webservice.intern.ekom21.de
gewerbe.ekom21.de
ecm21-qs.intern.ekom21.de
ema21-webservice.intern.ekom21.de
hcmc01.intern.ekom21.de
*.ekom21.de
fe21.intern.ekom21.de
gnhdbv3.ekom21.de
dms21-kil.intern.ekom21.de
adt.ekom21.de
rim.ekom21.de
bpm21.intern.ekom21.de
adt21qs.intern.ekom21.de
www.shop.ekom21.de
domicil21.intern.ekom21.de
ozg.ekom21.de
zeit21.ekom21.de
domicil21-mz-qs.intern.ekom21.de
portal-civ-hel-qs.ekom21.de
citrix.lwv.ekom21.de
esina21.intern.ekom21.de
fe21.intern.ekom21.de
civ-hzd-qs.intern.ekom21.de
portal-civ-hel-qs.ekom21.de
kundenzufriedenheit-itops.ekom21.de
webkita.ekom21.de
zema21.intern.ekom21.de
teamsites.ekom21.de
prm21-qs.intern.ekom21.de
antragsportal-fm.ekom21.de
migewa.ekom21.de
fe21reports.intern.ekom21.de
zaehlerportal-civ.ekom21.de
owi21oa.ekom21.de
kai2web.intern.ekom21.de
loga-bd-prod.intern.ekom21.de
fernwartung.ekom21.de
owi21oa.ekom21.de
kis-dev.intern.ekom21.de
vois-spiegel.intern.ekom21.de
zema21.intern.ekom21.de
zeit21.ekom21.de
ebot-qs.ekom21.de
sozabis-anwtest.lwv.ekom21.de
portal-civ.ekom21.de
citrix21.ekom21.de
webmail.ekom21.de
tevis-qs.ekom21.de
dvdv-he.ekom21.de
zda.intern.ekom21.de
zeit21-qs.intern.ekom21.de
prm21.intern.ekom21.de
logaweb-pro9.intern.ekom21.de
civento21zm.intern.ekom21.de
*.ekom21.de
fe21-qs.intern.ekom21.de
owi21oatest.ekom21.de
owa.ekom21.de
owi21v4-qs.intern.ekom21.de
votemanager-qs.ekom21.de

Certificate

The complete raw certificate details for owi21oa.ekom21.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1511889180351730026965136367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-06 15:46:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 15:46:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Giessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekom21 - KGRZ Hessen K.d.oe.R.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owi21oa.ekom21.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844128556035154429564759621751170941753138595541424572816056073526153302594914138019548918267941648494399115143722644737030633029206745807373663873375642905893888204831833837008465347624963732510410440533161828383767570025996298212325071379763823316368123403526750433025887446792934072353782106126772428452575724683121238609684105633969886997310252334940063933350279788280408756580853089793745781426532848863361987217528655459436590421925505151289276226318144886608186337668208400306854267772448036395970554474511597835992397548858326988512129448497530056563944513045582960645164603518097423669314204831134562906410040167686840805312957923709985022633490241110245858646123210479928288732991778927412168322532219824123514651282284540406399886845575325510843043696880516514061572175335232956881502197920405177947078478379688555795961654710640608960448258969331909869850077803394757408671019781593840490280216380079340663002257344441412475665980712750261994533938449282826181893475078166263744731208880041235242755102962769164018310282692591635216564483330456496722432734890191277607099928314262238370028401307002767211868141010430710010848218292886133629233356604483110204713612287906356891783282870696225763703806130499759519174820383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owi21oa.ekom21.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c41625b2ebd5d773accfb618b50b6f359154eef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0060a22ba958a76b7ccbda7d962f1e751a2158038924fb8e38bc92714d7d6c9ad71b38bea2ebe3eb7d9032f337dec28c277f6fa16c17b9330725a9eed3eb28cc534d897e6d215006e484522d6838bc0b6dc9c143ec7e7208f33bf2f272117ca51184237e1d812e12f99e21960a49de3c36b7de38ce9b4c8c93bdbefff8e0fcbeab6e043acfcae0651bbf7f121830a1bb3ef431d6791919b5baf1caf22cf657917262d0e96adf60a1f339765b88a3666adc659c3ed621fd0f6dc04bcc25ce08d22a1bc31f852904ce969019c9f9582e414c8e1043b40dac1af7f80f2fca85bfa9f0f7820a31ef642e42627714517f7630ba31dce07b55e78fcedd25021764ad16e6