www.inwerk-bueromoebel.de

- Inwerk GmbH -

Issued by GeoTrust Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 23:b8:1f:61:23:d0:19:b9:a6:f6:ba:30:22:fa:fc:87 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Inwerk GmbH

Company registration number: HRB 12519
Organization: Inwerk GmbH
State / Province: Nordrhein-Westfalen
Locality: Meerbusch
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 23:b8:1f:61:23:d0:19:b9:a6:f6:ba:30:22:fa:fc:87
Serial Number (int): 47478998925355494318774401194520149127
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 17:b8:dc:aa:b1:53:22:19:41:95:7b:3c:81:ea:88:9b:49:c3:a2:8b

Fingerprint (sha1): 86:23:7c:a5:0d:e9:11:f5:5b:b5:73:80:4a:3f:19:aa:bd:b7:23:fd
Fingerprint (sha256): 21:db:ad:3d:62:3e:a4:fc:b4:1c:f6:61:06:9f:84:d5:7a:3f:42:64:9a:86:72:89:16:68:61:af:e4:58:66:82

Issuing Certificate URL: http://gk.symcb.com/gk.crt

Revocation information

OCSP Server: http://gk.symcd.com
CRL Distribution Point: http://gk.symcb.com/gk.crl

Check the revocation status for certificate www.inwerk-bueromoebel.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.inwerk-bueromoebel.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.inwerk-bueromoebel.de
inwerk-bueromoebel.de

Other certificates including the domain name inwerk-bueromoebel.de

(limited to 100 certificates)
www.inwerk-bueromoebel.de
www.bad-werksverkauf.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
stage.inwerk-bueromoebel.de
stage.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
stage.inwerk-bueromoebel.de
stage.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
stage.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
stage.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
auswertungen.inwerk-bueromoebel.de
stage.inwerk-bueromoebel.de
www.inwerk-bueromoebel.de
stage.inwerk-bueromoebel.de

Certificate

The complete raw certificate details for www.inwerk-bueromoebel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47478998925355494318774401194520149127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Neuss'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 12519'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Meerbusch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Inwerk GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.inwerk-bueromoebel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869680455630998891883360428447870138468417256752142210928417716731506733873434906881449018164921858837722710814288628099804438566219475669054860621254924089369799460644169942916867346215270052434250153657759696780774388831956622166556539945175753727174283817893110177889194706617357585926441142131032002929112786737453395370174864991078098727268746841435699347222401015827671729821990863913827113996761436984811263040899507090750400207751012928420997309318680813810104161895168509885849414851498503093320082047894894322916227236519444028127496868372627133714224113385155580396070291172367156433430518806471387928373343457760238077454394733925818254186348929122420141445376991470743239498895442692677944521254823146590248351519253286255450129187542721228985639375885069945365937796810386247735316382008057605422588315741090712954068724905485564651199715446627978957887284790684363703980599013351376641652492760642157492795642083437361939971259157683361913700869986291062744094837713417850772136732185051424343202475870031302451445536853628459035641707791014928586404042683967396819953509607079824996671712457274319258461547259271847392934461921745169056616628557922201767760265714210179317461905959771373833810453725828962871565696931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inwerk-bueromoebel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inwerk-bueromoebel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17b8dcaab153221941957b3c81ea889b49c3a28b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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