www.correspsearch.net

- Berlin-Brandenburgische Akademie der Wissenschaften -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d9:e2:93:58:35:ef:50:63:19:d8:f2:c3:42:3a:60:45 was issued on by GEANT Vereniging.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Berlin-Brandenburgische Akademie der Wissenschaften

Organization: Berlin-Brandenburgische Akademie der Wissenschaften
State / Province: Berlin
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): d9:e2:93:58:35:ef:50:63:19:d8:f2:c3:42:3a:60:45
Serial Number (int): 289618922678337671923816035979437432901
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 44:63:91:46:a2:9a:df:e1:f3:97:b3:60:1c:6b:06:89:2b:d1:54:f1
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): a5:04:c4:ac:d7:84:57:cc:aa:2e:36:cf:21:63:a1:c6:bc:f3:ba:2a
Fingerprint (sha256): 22:ed:42:80:b2:78:3a:2f:d3:07:89:93:80:26:62:7e:cc:1d:02:87:1e:67:49:15:1b:b9:2a:ae:6d:b1:a5:18

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.correspsearch.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.correspsearch.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.correspsearch.net
api.correspsearch.net
beta.correspsearch.net
correspsearch.bbaw.de
correspsearch.de
correspsearch.net
dev.correspsearch.net
quotesalute.net
www.correspsearch.de
www.quotesalute.net

Other certificates including the domain name correspsearch.net

(limited to 100 certificates)
correspsearch.de
www.correspsearch.net
correspsearch.de
correspsearch.net
www.correspsearch.net
www.correspsearch.net

Certificate

The complete raw certificate details for www.correspsearch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289618922678337671923816035979437432901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin-Brandenburgische Akademie der Wissenschaften'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.correspsearch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810192563561234435004924439865209022478504897947364677161102057051150290886871290850318354694319503683635448662900328456388909897448697499372596276943979078681555671439127201739252745263987686593341294669314821597485853888519829271103532655008767022874528504361310789474683685995857919274269073494073964964840158356832520587724669685021042605750443784757184710659819815997304712274886229496348658106040033070126004178321614653931619208504806014665267246001833999949411696098975775957050652322860517031451118012497569205461021221639021680508868029336457509574923300713547188427275645742958721959007438087343269290905287626551024688595592638284168051691546794548262453585852823557737745561219017600340812965739827097210721154108395645670988123848639435248245961193601243157815129674807104363764223009478314879535897751624675746734410771964056161601788593713456331148320369428481785680502540356304562003546226016150609838502563983579358322560480860982548420524735985544880047498125512393606671563369317053921552453184445183894579948769913334655414506320477384243594301477077120564338888627862143257723969213407064812015939873531438024144971610024149140098363696657205731424429152058711727084353974736883429274761405930413838959385876551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44639146a29adfe1f397b3601c6b06892bd154f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (216 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspsearch.bbaw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspsearch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.correspsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotesalute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspsearch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotesalute.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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