piwik.sis-schwerin.de

Issued by GeoTrust DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 0b:48:8f:1e:d8:44:aa:52:1d:56:0c:5a:d3:85:f9:f0 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=piwik.sis-schwerin.de

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:48:8f:1e:d8:44:aa:52:1d:56:0c:5a:d3:85:f9:f0
Serial Number (int): 14998256155798553202190147833674725872
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 49:ec:a7:c8:a9:f7:c5:bb:2c:aa:24:e7:f4:43:b3:b1:3c:e8:54:f8

Fingerprint (sha1): b5:12:d1:ab:b8:3a:08:29:0e:58:1e:bc:6b:35:0e:9a:c7:a8:41:4d
Fingerprint (sha256): 27:ae:23:8b:11:d5:8b:69:92:28:2d:71:74:4f:67:16:dc:a4:0f:10:00:c9:1d:ac:b8:04:29:34:d0:fe:da:29

Issuing Certificate URL: http://gr.symcb.com/gr.crt

Revocation information

OCSP Server: http://gr.symcd.com
CRL Distribution Point: http://gr.symcb.com/gr.crl

Check the revocation status for certificate piwik.sis-schwerin.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwik.sis-schwerin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwik.sis-schwerin.de

Other certificates including the domain name sis-schwerin.de

(limited to 100 certificates)
cag3.sis-schwerin.de
mobil.sis-schwerin.de
sis-schwerin.de
emmtest.sis-schwerin.de
sis-schwerin.de
sslvpn.sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
mgw2.sis-schwerin.de
cag1.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
piwik.sis-schwerin.de
ssl-vpn.sis-schwerin.de
sslvpn.sis-schwerin.de
www.sis-schwerin.de
www.sis-schwerin.de
www.sis-schwerin.de
webmail.sis-schwerin.de
mgw1.sis-schwerin.de
*.sis-schwerin.de
www.sis-schwerin.de
sslvpn.sis-schwerin.de
*.sis-schwerin.de
sslvpn.sis-schwerin.de
sis-schwerin.de
sis-schwerin.de
*.sis-schwerin.de
sis-schwerin.de
mobil.sis-schwerin.de
cag3.sis-schwerin.de
emm.sis-schwerin.de
piwik.sis-schwerin.de
www.sis-schwerin.de
sslvpn.sis-schwerin.de
mgw1.sis-schwerin.de
mgw1.sis-schwerin.de
piwik.sis-schwerin.de
webmail.sis-schwerin.de
cag3.sis-schwerin.de
wlanportal.sis-schwerin.de
webmail.sis-schwerin.de
webmail.sis-schwerin.de
sis-ksm-wlanportal.sis-schwerin.de
www.sis-schwerin.de
sis-schwerin.de
cag3.sis-schwerin.de
sis-schwerin.de
webmail.sis-schwerin.de
www.sis-schwerin.de
sis-schwerin.de
wlanportal.sis-schwerin.de
analytics.sis-schwerin.de
*.sis-schwerin.de
webmail.sis-schwerin.de
piwik.sis-schwerin.de

Certificate

The complete raw certificate details for piwik.sis-schwerin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWB6SP60pmW0xI/iUsRe
OWynOcYAQkiXu78XFlV0osf27ta6fwWD8vEU5zlG1CHbJOEz5XU5ehiuQoOW7M9s
GU9UNEBZQnLDo+Fye9Pu8xLofDpxJ4TAe5B3PnumH5VcxvvCQS7nR4pT+XgqJ9Ps
zvcdgwyZghjpuDYWDR3vMNh0ikD0GWa/0b4kRv7n6wbCNZKA7O+JhLtosAfH9kQo
x7Hh/VdkEiyxUfwbZHKd4OCbqOV/i4VumAPub/arGcxgFdGrYLe8vkONV52UtIBV
ceF1LZQPfTTMuyfEnK+fQqRC7EqOOU8sBvw1BRZfe3t1navOF6w8hPrjb+k2+jVB
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14998256155798553202190147833674725872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'piwik.sis-schwerin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23906614553917113297819100148133260851218819306008520075952838497587624762499371848825531513394113133235761409170261276586735091688685561213328052799471949251859532108668498185988924397216678874302190455269616176913035785779818686777744367671202716008115652584049793732759406091084923287606153742249837239339265775155796347048062529655215414922489836182104162591944275864785599300442384203135050090375460188205056289109502783143508643743295155970594467651956111437546657411180787069674401468502917642728509650822354777581702295531360639889864941698890176285348475976845982229827512009810200219531412846590703166636383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.sis-schwerin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 49eca7c8a9f7c5bb2caa24e7f443b3b13ce854f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gr.symcb.com/gr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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