klimawandel.mandant.dwd.de

- Deutscher Wetterdienst -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number cc:3d:bd:43:89:7d:7e:0e:05:44:f1:9b:69:70:6d:97 was issued on by GEANT Vereniging.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
State / Province: Hessen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): cc:3d:bd:43:89:7d:7e:0e:05:44:f1:9b:69:70:6d:97
Serial Number (int): 271483079974746598528924800958971538839
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e0:ce:e8:16:ca:68:a9:84:26:18:15:d0:d0:61:2a:a1:1c:38:ea:94
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 07:a0:b9:0e:89:af:6b:28:79:9c:a1:c9:0f:2f:02:f6:0f:7c:36:fc
Fingerprint (sha256): 22:c7:cd:4e:25:b7:7e:cb:e6:6f:e6:4c:5b:99:bd:25:40:28:88:3f:5c:ab:06:fa:bd:b3:0b:28:00:ae:e1:28

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate klimawandel.mandant.dwd.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for klimawandel.mandant.dwd.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

klimawandel.mandant.dwd.de
klivo.de
klivoportal.de
www.klimavorsorgeportal.de
www.klivo-portal.de
www.klivo.de
www.klivoportal.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for klimawandel.mandant.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271483079974746598528924800958971538839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'klimawandel.mandant.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3381232635725486539370330788296419229057447285751554661644787058974566806028126987504482332572435198793325967052523299747414014799602700877057298820143031031320366177606967521830660538237470536644860445698704607756567753983061798312920895349885403574992322314573027807894701692654320802737751402828241786204430865652108797916684174096444425008895605118371097806273898572025723076615657014006122610535613953954535093750680854823215560704599492551456635270945108374193479280334966042981992082955246940011696243227893109917164099781967343749553949820706242719138748169743681152170563919684385687683829716904513244236499774117254525083917673515789864149740031658037805600406894386301605712855595937047878475606628732348312464870103831807127490661877096064554443897622129882205704856188702991726668862236957161994021910585421236395667591999994414920866075411789827756259926627716155431884849405188376473114852924261963011521069887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0cee816ca68a984261815d0d0612aa11c38ea94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a5f015b6700000403004630440220609d46eebd61972cf90e1485f929b28e728a0f6dd449029a2dd00235526b569a022038a816fed464bf51415bf56630593777d41a75bf5fd9f9c5e890c757c4d113ed007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a5f015bba000004030048304602210082c7fb557d01f221c00f6e159d5f6b8de11792a51840bf7a63092fb676fc6842022100f31cfb87532d6260e74619e6c6d436644da4da3973691c3b8d03e40ea0e4e0c8007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a5f015be200000403004630440220716331723a47b3e3276c7b45a53b58c55761acfe60cae93427803aec0a1f41bf022030edf15325ee44e9bc70b37692abe314d156067402cfb483b8055759af0986b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klimawandel.mandant.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klivo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klivoportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klimavorsorgeportal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klivo-portal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klivo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klivoportal.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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