hk.mandant.dwd.de

- Deutscher Wetterdienst -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 42:1f:79:8d:87:9f:95:4d:94:bf:7f:02:07:48:c2:21 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
State / Province: Hessen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 42:1f:79:8d:87:9f:95:4d:94:bf:7f:02:07:48:c2:21
Serial Number (int): 87892474309125384226452586526061150753
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: bc:0d:04:ff:82:64:66:2d:5b:0f:55:73:2e:2b:a3:79:04:3c:5b:a8
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 16:2a:b3:8c:5e:60:b7:1e:78:ff:55:55:46:cb:8a:4f:df:89:f6:eb
Fingerprint (sha256): 22:62:ba:97:23:93:f4:7d:67:b6:fa:4c:9c:c7:95:58:98:e0:94:a7:1f:cb:d8:29:85:de:38:2a:dc:fe:27:4f

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate hk.mandant.dwd.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hk.mandant.dwd.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hk.mandant.dwd.de
havariekommando.de
www.havariekommando.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for hk.mandant.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87892474309125384226452586526061150753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hk.mandant.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5405547801329651433123521680985445280487974862704570348677753258008928849449318205128078075708160123797343664129838538774067951772443059813732685762533958865855103305726840134850973035011281233051584573465953177819010917258781260274870241494777359566263831574365855321749662354878271648469536552418594982558855920818705455862187510171846963163844789531296440134691240963526663326419736533263166227750022019878511523812278321051621550741253949834570237378187712066853689432973183521491126651068362783684788715818365645931002973934931283725645552251707845790062382921645667292119506169830664578929617330673000070881338430088911688603307499237086608503459215204773442273486108148306434425825067356157988082491772895851152444188380195925838137704241794801545770771972230133295874791039311273183444282322139627877124387948679909181447728233566961142388775847598541912341314660326595057794959108521261594006675587726839142747661907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc0d04ff8264662d5b0f55732e2ba379043c5ba8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.mandant.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havariekommando.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havariekommando.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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