opendata.mannheim.de

Issued by thawte DV SSL CA - G2

About this certificate

This digital certificate with serial number 2c:9b:31:68:7c:f8:4c:30:20:0d:83:69:f4:8f:98:73 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=opendata.mannheim.de

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:9b:31:68:7c:f8:4c:30:20:0d:83:69:f4:8f:98:73
Serial Number (int): 59291839944084991714248897590551615603
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07

Fingerprint (sha1): 68:b1:df:a9:df:1d:2b:45:23:08:22:f9:9a:7c:c1:f4:c1:5e:a2:2d
Fingerprint (sha256): 25:86:02:8e:46:6e:de:57:5c:d9:1c:97:b4:89:27:94:25:b4:d4:d9:b6:1f:43:53:86:68:1c:e3:97:22:09:66

Issuing Certificate URL: http://tn.symcb.com/tn.crt

Revocation information

OCSP Server: http://tn.symcd.com
CRL Distribution Point: http://tn.symcb.com/tn.crl

Check the revocation status for certificate opendata.mannheim.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opendata.mannheim.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opendata.mannheim.de

Other certificates including the domain name mannheim.de

(limited to 100 certificates)
veranstaltungen.mannheim.de
red.mannheim.de
scope.mannheim.de
extern.mannheim.de
NBGstamanEXP-E1.mannheim.de
piwik.mannheim.de
web2.mannheim.de
mailings.konversion.mannheim.de
buergerinfo.mannheim.de
bewerbung.mannheim.de
www.mannheim.de
theater.mannheim.de
opendata.mannheim.de
www.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
mailings.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
bs.mannheim.de
veranstaltungen.mannheim.de
stadtarchiv.mannheim.de
*.mannheim.de
khria.mannheim.de
veranstaltungen.mannheim.de
gastwlan.mannheim.de
extern1.mannheim.de
www.mannheim.de
buergerinfo.mannheim.de
buergerinfo.mannheim.de
beteiligungshaushalt.mannheim.de
*.mannheim.de
svcloud.mannheim.de
bewerbung.mannheim.de
www.formular.mannheim.de
piwik.mannheim.de
*.mannheim.de
piwik.mannheim.de
katalog.mannheim.de
theater.mannheim.de
www.mannheim.de
www.formular.mannheim.de
www.mannheim.de
artup.mannheim.de
svcloud.mannheim.de
ccs.mannheim.de
piwik.mannheim.de
mdms.mannheim.de
katalog.mannheim.de
waehlenab18.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
mailings.konversion.mannheim.de
webco.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
web2.mannheim.de
www.mannheim.de
theater.mannheim.de
scope.mannheim.de
services.mannheim.de
piwik.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
stadtarchiv.mannheim.de
mailings.konversion.mannheim.de
web2.mannheim.de
bewerbung.mannheim.de
web2.mannheim.de
katalog.mannheim.de
NBGstamanEXP-E1.mannheim.de
services.mannheim.de
scope.mannheim.de
katalog.mannheim.de
mailings.konversion.mannheim.de
ccs.mannheim.de
veranstaltungen.mannheim.de
mailings.konversion.mannheim.de
theater.mannheim.de
mailings.konversion.mannheim.de
www5.mannheim.de
um.mannheim.de
formular.mannheim.de
katalog.mannheim.de
www.stadtarchiv.mannheim.de
umfrage.mannheim.de
bs.mannheim.de
bs.mannheim.de
bs.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
umfrage.mannheim.de
ccs.mannheim.de
extern.mannheim.de
svcsg50.mannheim.de
scope.mannheim.de
bs.mannheim.de
mailings.konversion.mannheim.de
katalog.mannheim.de
fuehrerschein.mannheim.de

Certificate

The complete raw certificate details for opendata.mannheim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59291839944084991714248897590551615603
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'opendata.mannheim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887600215482927535815911520157905245277346332721832938823899617865664462006752506117476908994347001596234722677286177015312578344481029062247392752881228587549879876536425816679134110420539296422265778754222442586506753291820337870100005515224747173994740731886460438441549513981274967319043505737568021395260777785354289679663134976328862750584681262402375169546028921570903210512626598196887206504650805876035038267145585548763614167598290778370355914702658909593276122960793789829530766138011371925386971683866933302431735132653439094629850879196779540262922232689856339776371385056266559930199430470454262055585213713107459375880274338023176472361261235029979134685541599757882986965154592355058519802597152197159692770616077530197749262010828833395106965700976528848591023880479870923659968098812347302137224386995300093637773831397978595337648016859088287914838341428909391032944129440928812973419653732038117780238843312160135287977782453054065922750138844998780865226157134767492192637653034069872941105519620261077344399018277339265702779102695300254341105358147846879740950187003820180701947716860612143384362188806277898959028811785797409111330776098590575482729951371534022391021477938116341876690680273623024603584455167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.mannheim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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