dwdhosting.mandant.dwd.de

- Deutscher Wetterdienst -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 48:3c:06:ca:8d:73:54:5c:38:9d:be:ef:a7:3d:9e:6c was issued on by GEANT Vereniging.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
State / Province: Hessen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 48:3c:06:ca:8d:73:54:5c:38:9d:be:ef:a7:3d:9e:6c
Serial Number (int): 96016091250349293532234655350065569388
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6e:13:f4:f8:93:10:8f:d9:13:f6:31:b6:77:dc:a2:c5:c9:31:d7:a2
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 0f:37:30:4c:71:37:c1:a5:62:64:bf:a8:d8:fb:ab:6c:ca:cf:07:20
Fingerprint (sha256): 21:46:90:d7:3e:cd:8b:d3:c3:41:46:23:e6:d3:e4:9b:cd:4f:76:36:42:95:02:54:a6:d5:9c:68:bf:4b:a9:d3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate dwdhosting.mandant.dwd.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dwdhosting.mandant.dwd.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dwdhosting.mandant.dwd.de
livepreview.dwd.de
livepreview2.dwd.de
livepreview3.dwd.de
livepreview4.dwd.de
livepreview5.dwd.de
livepreview6.dwd.de
livepreview7.dwd.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for dwdhosting.mandant.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAwmjF9e9icHFov+Gq7T7M
wJPw5U9HRRNgltjvr8/O83WZ0qJB05ZoGsYWr7Sl56ddEyeS4rqJSzCblHP3oys0
WSsF9+eSH6tPrjlZ/3teSisBslpxbc+c3CagT7lb8YDZuzuCP7quLpJsa4/GJVst
lGSCMLGpm4XUSt8wzhSOvClLEnXBeBmcXeavfeN3diNT5RxZEOoYgKk75zjLpZx4
iEb3igKiuGjYyCg8ICU8VyrbBMkjZcOVWPuZnZ6YkUXh42hZxSYFPtmEOTFcxrBq
gGKGHM/Qx5LRKhSpat5VALU7xHpMak06QUbGH+iOWcTnU9S6hJPrIMGZrkCGqtRa
OcmfJ7+InwAIFK0wEbmqYDZlwtipWmOZ6WfhBNNZOH42tYb5/UMK+5CiJRdiptng
e4n7H37zEro4chZLhYjiw3mO1j+Bo7CyKt4DQ0jnCwnFPBqUWeZpHTBRfGR0kZgO
UqhTEtrB1BJ2tj7uCmIf+2WdXbT31azkvzSBorj7+D6zAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96016091250349293532234655350065569388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dwdhosting.mandant.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4411879938544921804036584835503872661119306111501205125207167952093471572787333636755909864679919578401365229630305462810737179515838812965250917157387849786218314650913298307123323208681302999819618142115428325817311361650800315186735867546052036458501625874857463880156213480725220733318406332892144581652748361241726443982380659558916386065138576651880992964835349826056317004808783571966551907272154475427593981289376577387641925172432675871901600835852851662568972443829755367375891910779712702884489280615218446278374227587999562659609103353458599266684397508242331725295804504642877500251452504291281572671534524890964942042454249946739337395248057402696929772163675550367043868060654602355737666919088514832759127194451745652393038533077186426166481087335062810426698419180453115101002878815836096847504393155565696340175796255723022897575084685658457436917537817483343633562590403584185672641899042942138774793502387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e13f4f893108fd913f631b677dca2c5c931d7a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (176 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwdhosting.mandant.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepreview.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepreview2.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepreview3.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepreview4.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepreview5.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepreview6.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepreview7.dwd.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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