*.exco.de

- E X C O GmbH -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 48:00:44:75:c9:69:40:23:4f:fe:f5:2b:8f:e8:62:4f:1f:2f:b8:b7 was issued on by QuoVadis Limited.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

E X C O GmbH

Organization: E X C O GmbH
Organization unit: IT-Services
State / Province: RHEINLAND-PFALZ
Locality: Frankenthal
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 48:00:44:75:c9:69:40:23:4f:fe:f5:2b:8f:e8:62:4f:1f:2f:b8:b7
Serial Number (int): 411053299215518054386230664619706031351381604535
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f9:4a:6c:80:0d:2e:fc:30:2c:58:1b:05:02:d5:59:f5:b2:5b:51:b7
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): b8:89:39:ba:b1:95:b9:5c:38:76:3a:3f:07:33:73:28:bc:af:f8:a9
Fingerprint (sha256): 28:2e:a2:63:cc:f9:b3:5f:8d:e1:58:91:5a:0b:5a:d2:8b:1f:4e:48:1a:cf:47:40:9f:63:ec:c5:27:ad:4c:fc

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate *.exco.de

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.exco.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.exco.de
exco.de
*.exco.gmbh
exco.gmbh
*.exco-consulting.ch
exco-consulting.ch
*.exco-group.com
exco-group.com
*.exco-group.de
exco-group.de

Other certificates including the domain name exco.de

(limited to 100 certificates)
plan.exco.de
*.exco.de
exco.de
plan.exco.de
*.exco.de
*.exco.de
exco.de
mail.exco.de
*.exco.de
exco.de
*.exco.de
mail-ft01.exco.local
career.exco-services.com
exco.de
exco.de
exco.de
*.exco.de
career.exco-services.com
mail-ft01.exco.local
exco.de
exco.de
mail.exco.de
plan.exco.de

Certificate

The complete raw certificate details for *.exco.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+YxJRlRHkFN3+wtmVq+
GfhnaHs6+Ra6XO77bqbRsAOKFMH21BsvUoJrODGlQ0/eTw71HtU0hC72rRwLxqiT
5YDnxRlyO7pX4TyvRZ4CBLStMrtbIJ+JrWzffBUHKufU2rsIeNs++/4Gn2dFYAnY
lBstg/EoTSZnccGadqdNHCN9bLJ8l1oZPVPWe3jpTbt3XC1mpk+2OuoF7ltvEy0b
LHLZ9ekyWVBMIKsweqJQz7HQ7gwW0k0+QO1GMk/ArSIrL8evyVRBzUooQQV46joG
cfJOSu179sLUyEuCTlrRe+BspAO+FovERXYTJbRgJX7y7nMcAFAt3Vxn0zq4yDVv
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411053299215518054386230664619706031351381604535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 13:51:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-20 14:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RHEINLAND-PFALZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankenthal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'E X C O GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT-Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.exco.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28769607119499459776474189826412407253999214093943104150004394994245149324055507562769229646210022534580847554716157174082520933858320127375290672139952146096923021401597963633057388601447963335897595228373664281588665293654850271914173149748242076431144844407416749314445973649447832476120248119304436241192877429546751854969273170849715079693787130891298663887595282320999712498105426475025797749875079734379791262654704901473965449939450680827409566829030337454360468060093165945825737983888337008130008695086833436251715561581706998203701941317771978247277099465035181530863117605044289599604293265251434914738039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco.gmbh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco.gmbh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco-consulting.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco-consulting.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exco-group.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exco-group.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f94a6c800d2efc302c581b0502d559f5b25b51b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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