www.berghaus-verkehrstechnik.de

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:d8:9e:be:a2:45:5e:a2:59:9e:63:15:f0:11:f2:5f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.berghaus-verkehrstechnik.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d8:9e:be:a2:45:5e:a2:59:9e:63:15:f0:11:f2:5f
Serial Number (int): 11758579812011538795035118224043799135
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e5:7e:90:14:66:8e:1f:f7:b6:4e:05:d0:7f:da:fc:39:f9:71:65:7c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 6b:45:ff:1d:4f:e8:5b:9b:2b:75:1d:38:51:32:5c:69:fb:45:f4:17
Fingerprint (sha256): 23:cd:9e:24:bf:3f:20:da:91:80:57:50:19:ba:1c:40:8f:c3:13:93:e4:b8:97:24:ea:66:18:4b:48:e1:6b:9a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.berghaus-verkehrstechnik.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.berghaus-verkehrstechnik.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.berghaus-verkehrstechnik.de
berghaus-verkehrstechnik.de

Other certificates including the domain name berghaus-verkehrstechnik.de

(limited to 100 certificates)
moebel-gruber.mediaflip.de
jobst-wohnwelt.mediaflip.de
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
kiosk.dolcevita-magazin.ch
catalogs.k7-pro.com
downloads.berghaus-verkehrstechnik.de
moebel-mmz.mediaflip.de
downloads.berghaus-verkehrstechnik.de
hoffmann-moebel.mediaflip.de
downloads.berghaus-verkehrstechnik.de
hummerich.mediaflip.de
moegro.mediaflip.de
www.maryspubs.com
ruesen.mediaflip.de
ruesen.mediaflip.de
moebel-zuck.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
epaper.audimax.de
angebote.dersteirerhof.at
magazine.biss.team
jobst-wohnwelt.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
katalog.seglerbedarf.de
kataloge.triplex-fischer.de
moebel-mmz.mediaflip.de
moebel-mai.mediaflip.de
sonavsofab.xp1.com
ruesen.mediaflip.de
moebel-zuck.mediaflip.de
magazine.biss.team
moebel-berta.mediaflip.de
epaper.sinntec.de
moebel-mmz.mediaflip.de
hummerich.mediaflip.de
trop.mediaflip.de
moebel-gruber.mediaflip.de
*.berghaus-verkehrstechnik.de
www.berghaus-verkehrstechnik.de
moebelundobjekt.mediaflip.de
webkiosk.edeka-koehne.de
moebel-meyer.mediaflip.de
ruesen.mediaflip.de
kataloge.otto-pokale.de
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
ruesen.mediaflip.de
catalogs.k7-pro.com
logo-moebel.mediaflip.de
catalog.triebel-guntools.de
moebel-gruber.mediaflip.de
moebel-berta.mediaflip.de
moebel-gruber.mediaflip.de
moebel-berta.mediaflip.de
magazine.biss.team
moebel-meyer.mediaflip.de
mobila.mediaflip.de
kataloge.werbeartikel-laeser.ch
moebel-mai.mediaflip.de
moebel-mai.mediaflip.de
magazine.biss.team
magazine.biss.team
moebel-mai.mediaflip.de
webkiosk.werk5.ch
jobst-wohnwelt.mediaflip.de
jobst-wohnwelt.mediaflip.de
trop.mediaflip.de
moebel-mmz.mediaflip.de
magazine.grossglockner.at
www.berghaus-verkehrstechnik.de
magazine.biss.team
moebel-gruber.mediaflip.de
webkiosk.holz-speckmann.de
epaper.audimax.de
moebel-seesen.mediaflip.de
magazine.biss.team
kataloge.otto-pokale.de
ruesen.mediaflip.de
catalogs.k7-pro.com
ruesen.mediaflip.de
jobst-wohnwelt.mediaflip.de
moebel-mai.mediaflip.de
moebel-mmz.mediaflip.de
epaper.transgourmet.ch
webkiosk.tkmparkett.de
webkiosk.mediabiz.at
moebelundobjekt.mediaflip.de
epaper.uehlingerag.ch
epaper.uehlingerag.ch
epaper.transgourmet.ch
jobst-wohnwelt.mediaflip.de
catalogs.k7-pro.com
moebel-mmz.mediaflip.de
wohnland-hauber.mediaflip.de
epaper.uehlingerag.ch
owa.avs-vks.de
epaper.transgourmet.ch
moebel-brameyer.mediaflip.de

Certificate

The complete raw certificate details for www.berghaus-verkehrstechnik.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv6O5h99toGQnoNsQYjI
1Vnzds++Ks5J0z+Io9pOMssTE639GH/D3+TJVt56C3CzJ/zTIYhMqbdjPJ9/hTY4
AnBNovwPM1yATNOhUAbisGUt67TzEUhlatUA3/F9R3xU0DH3QOFzaL2kgf2b71Yf
HwuMRzSnoNHLmnxE21K8jR4PGmV2arJudaiUC0O1LIWIsXt+h4jRyQcUrU5dElkg
U7aTSWeT8seRzhBS2OhAoL8QIOqXYPtndCM19YvoqEg0B3cFq8l9eqQUdTAiMoDL
jOQ4m8fSzWuS1pLduEbrxLwCSm5wgli8hYu55h65b/3pplFizkO/tajv7OR5HmQH
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11758579812011538795035118224043799135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.berghaus-verkehrstechnik.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20071179510981634277539463197769468499831107266360425321780548878145475121016934281423834309261651082248089275692147336318176383394741174076468035703783996211169782822463097020748565706623401711413928667486917747310959649825771394128455000256556156808242497893820528300370434782576472312320489922271228233008598646723176326190293700290428869101127003789644005494580285702900549385398126113339029867905029112183654737554564139344406546118819747941472829119627723058539755401844010540548495798646783602381854796719831682459296736746858153302505819613465669659989682257171861624070157274401960106145746704286277563582451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e57e9014668e1ff7b64e05d07fdafc39f971657c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berghaus-verkehrstechnik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berghaus-verkehrstechnik.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001714e8005410000040300473045022100f4c7453aab48434234bb2ef63a0a1b87088a1becf7295e612de13785f305da77022079038629e1494174cd4dbcdc3973d93f39554ebd25a42315ff675053b07e98ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001714e800585000004030047304502205892172174f8249372a32cfc362d344292c307b577f49cea8c8b5632ffadcc69022100be118b8a8caf42a71001bfd4216c781799ad1b2059f05189782890c8d1f380d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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