BR-33211597-mripi.des.tkelevator.com

Issued by TK Elevator Atlas R6 DV CA 2021

About this certificate

This digital certificate with serial number 01:59:26:12:8e:00:30:d0:a2:32:1d:60:d6:ca:79:ea was issued on by TK Elevator GmbH.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=BR-33211597-mripi.des.tkelevator.com

TK Elevator GmbH

Organization: TK Elevator GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:59:26:12:8e:00:30:d0:a2:32:1d:60:d6:ca:79:ea
Serial Number (int): 1792114617813481468909589031134329322
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 41:51:a9:df:5f:35:40:97:96:16:e1:01:52:e4:1c:48:38:2e:ef:2f
AuthorityKeyId: 6b:1d:52:92:e2:af:f4:42:d8:4e:73:aa:fc:fe:f1:d6:a0:d4:1e:7f

Fingerprint (sha1): 43:84:89:04:75:31:7c:1d:44:d2:b2:7b:01:7b:02:b0:6f:30:97:53
Fingerprint (sha256): 26:79:13:88:e9:e0:54:11:e7:49:c5:2a:3e:ae:0e:ff:fa:62:77:30:f5:8b:9f:f8:77:93:39:ce:17:5f:6f:de

Issuing Certificate URL: http://secure.globalsign.com/tkelevatoratlasr6dvca2021.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/tkelevatoratlasr6dvca2021
CRL Distribution Point: http://crl.globalsign.com/ca/tkelevatoratlasr6dvca2021.crl

Check the revocation status for certificate BR-33211597-mripi.des.tkelevator.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for BR-33211597-mripi.des.tkelevator.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

BR-33211597-mripi.des.tkelevator.com

Other certificates including the domain name tkelevator.com

(limited to 100 certificates)
totem.tkelevator.com
FR-33169498-xpu.des.tkelevator.com
ES-33200564-xpu.des.tkelevator.com
efactura.pre.poc.es.tkelevator.com
insight.thyssenkrupp-elevator.com
solarwinds.tkelevator.com
*.genesis.tkelevator.com
ap-sc-app-dev.tkelevator.com
av000ewe.sap.tkelevator.com
DE-33121233-xpu.des.tkelevator.com
PL-671171-xpu.des.tkelevator.com
scc-app.uat.tkelevator.com
BR-33316187-icipi.des.tkelevator.com
US-1371379-mripi.des.tkelevator.com
ea.myportal.tkelevator.com
carl-prod.tkelevator.com
scc-app.perf.tkelevator.com
legacyaccount.tkelevator.com
US-1384633-xpu.des.tkelevator.com
ea.myportal.tkelevator.com
DEGW8121-max.des.tkelevator.com
sc-uat.na.tkelevator.com
towerrun.tkelevator.com
spres-test.tkelevator.com
US-1371379-icipi.des.tkelevator.com
US-1371379-mripi.des.tkelevator.com
testldesc.tkelevator.com
ATGW167281-max.des.tkelevator.com
portal-fr.tkelevator.com
ap-sc-acetestui-uat.tkelevator.com
ES-719360-icipi.des.tkelevator.com
wv000sfd.sap.tkelevator.com
US-1371379-icipi.des.tkelevator.com
US-1371379-icipi.des.tkelevator.com
b-design-evolution-pre.tkelevator.com
US-1371379-mripi.des.tkelevator.com
status.greenewx.com
US-1371379-mripi.des.tkelevator.com
employeeportal.nl.tkelevator.com
myinfo.ap.tkelevator.com
US-3609-icipi.des.tkelevator.com
US-1227524-icipi.des.tkelevator.com
*.mf.es.tkelevator.com
ESGW198689-max.des.tkelevator.com
USGW198545-max.des.tkelevator.com
ESGW16577-max.des.tkelevator.com
*.aftersales-hh.tkelevator.com
prodconfigdev.na.tkelevator.com
visipass.tkelevator.com
GB-33169557-xpu.des.tkelevator.com
US-1380914-icipi.des.tkelevator.com
DEGW8147-max.des.tkelevator.com
portal-fr-test.tkelevator.com
e-design-synergy-pre.tkelevator.com
pki.tkelevator.com
BR-33211597-mripi.des.tkelevator.com
ESGW12337-max.des.tkelevator.com
ehs-training.tkelevator.com
wv000sfp.sap.tkelevator.com
23622-IG-1-mripi-1.des.tkelevator.com
ap-sc-app-dev.tkelevator.com
DE-33121204-mripi.des.tkelevator.com
c-design-synergy-pre.tkelevator.com
US-616625-mripi.des.tkelevator.com
isrvr-dev.na.tkelevator.com
*.pt.tkelevator.com
SRVETAS0026.tkelevator.com
PL-738386-xpu.des.tkelevator.com
TEGW6787-max.des.tkelevator.com
ES-719360-mripi.des.tkelevator.com
*.smart.tkelevator.com
*.toolchain.tkelevator.com
ES-719360-mripi.des.tkelevator.com
o2d-planboard.hme.tkelevator.com
datarotonde.nl.tkelevator.com
fieldapps.es.tkelevator.com
isrvr.scc.tkelevator.com
SRVETAS0031.tkelevator.com
fieldapps-pre.poc.es.tkelevator.com
ES-719360-icipi.des.tkelevator.com
US-1380914-icipi.des.tkelevator.com
*.ecf.tkelevator.com
jazz.tkelevator.com
ES-33169827-icipi.des.tkelevator.com
602437-IG-1-mripi-1.des.tkelevator.com
GB-701220-xpu.des.tkelevator.com
ea.myportal.tkelevator.com
isrvr-uat.na.tkelevator.com
ams.myportal.tkelevator.com
tm.ea.tkelevator.com
US-1380915-icipi.des.tkelevator.com
*.extranet.es.tkelevator.com
598552-IG-3-bipi-1.des.tkelevator.com
*.es.tkelevator.com
datarotondetest.nl.tkelevator.com
status.greenewx.com
ESGW166394-max.des.tkelevator.com
plan-synergy100-pre.tkelevator.com
ap.myportal.tkelevator.com
US-616625-icipi.des.tkelevator.com

Certificate

The complete raw certificate details for BR-33211597-mripi.des.tkelevator.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1792114617813481468909589031134329322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TK Elevator GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TK Elevator Atlas R6 DV CA 2021'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 10:31:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-06 10:31:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BR-33211597-mripi.des.tkelevator.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728025546148336825768194315303626029330441259816534196461778988438836147966743011123711631892530289711896245201597963574679885897682213743919210282599386232056188440178967687229540939103564261216769580707253194970186056581285339528874766278885190426562884956098290453787129056651613342984071422731500429379424295668326422147820549636461426157572382804493366601624352022716364624168298193429057977897234132909935048237692744449251443755590580601765222972714173647979059599049436990524417732370150752039554213943897947481954709526315181404808184940604135069999716732982243577520698117047177713525005080160937264548722467511131651233818764551055942861555449546545185479152515665558026316488119572493964438607994621910086446693524777158427159156335238966942166532273471456566034958397533406355328624961159330148967997373673808365812384092042554983389794274752087158024749267254783846336659968246370580357613674949790134103006606898560361066755060139972019868661665655575118505490776104852966959794518825430663879273804740758717609186752508390859077470212954244230481435334801107655567610911239090429242374880391989929858425130135690486756404048049263707593528365346758713636464561802251470228597170755580924437522576221723802035012670321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BR-33211597-mripi.des.tkelevator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4151a9df5f3540979616e10152e41c48382eef2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/tkelevatoratlasr6dvca2021'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/tkelevatoratlasr6dvca2021.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b1d5292e2aff442d84e73aafcfef1d6a0d41e7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/tkelevatoratlasr6dvca2021.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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