kusel.de

Issued by EuropeanSSL Server CA 2

About this certificate

This digital certificate with serial number 08:a0:81:d3:74:7f:c4:e8:54:54:7d:b8:d3:e3:a3:eb was issued on by EUNETIC GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kusel.de

EUNETIC GmbH

Organization: EUNETIC GmbH
State / Province: Baden-Württemberg
Locality: Durmersheim
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a0:81:d3:74:7f:c4:e8:54:54:7d:b8:d3:e3:a3:eb
Serial Number (int): 11467224647680785566974230786459542507
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 31:a0:b1:84:58:25:a6:5c:9b:ed:30:4d:f5:0f:87:e4:e7:06:76:4b
AuthorityKeyId: ee:e7:c5:9d:6f:48:1d:17:cb:d7:4e:3b:6a:02:0c:af:cf:e0:b6:bf

Fingerprint (sha1): 12:97:82:bd:88:2c:99:00:96:9c:dd:94:32:90:4f:a8:62:fe:e3:94
Fingerprint (sha256): 28:f3:ae:1e:86:a5:c0:be:f1:db:e2:f7:4f:24:0d:b0:a0:38:03:f9:9a:26:9d:9c:4c:29:e5:11:1b:ba:33:b2

Issuing Certificate URL: http://crt.usertrust.com/EuropeanSSLServerCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/EuropeanSSLServerCA2.crl

Check the revocation status for certificate kusel.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kusel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kusel.de
www.kusel.de

Other certificates including the domain name kusel.de

(limited to 100 certificates)
kusel.de
stadtwerke.kusel.de
kusel.de
stadtwerke.kusel.de
stadtwerke.kusel.de
kusel.de
kusel.de
stadt.kusel.de
kusel.de
kusel.de
kusel.de
kusel.de
museum.kusel.de
stadtwerke.kusel.de
stadtwerke.kusel.de
kusel.de
stadt.kusel.de
stadt.kusel.de
stadt.kusel.de
kusel.de
museum.kusel.de
kusel.de
stadtwerke.kusel.de
kusel.de
museum.kusel.de
kusel.de
stadtwerke.kusel.de
kusel.de

Certificate

The complete raw certificate details for kusel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeSwkA01xRkN1TsMCJkm
S1DqY3+p/WPgP3XYzvKKwsWoyN1Rv7GhPWWbQOSZHdfNk6xfiQDnY9zfEFJS8TFE
oXz+fJ+1x7ZY+0bj5YOgJ92dKXyAXgkac52zadSSeInSFrSJFIe3sw7Fkj3Uj8EZ
Qq/+zt/ny9L+y8q0CZpDgbW9sWKghnSiziGex2mgG+pU5vTnMWMINkLogGceflCN
CKrc8mX5MUO8qkQ7iO4eE12dfxPQC+Pf+oTV8MoEOfLY8kCfrYU/hGiurksPAvOy
I6bufDtsqh2QwwrnioSzqrpGPn4BhCvZIVVpIg+Rn+h+JYPbnVJWvkDSBVIVLWnA
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11467224647680785566974230786459542507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Durmersheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kusel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19427231752953106182556335051741637476541757234317787124189534140330995441348120634862163358104797010776589248926690867736975644262499564282593662560088733125697174795844154403525025625261632751869256676789912621763121537291393204105452720392383808692401846717309021133590343182411540873123269065734340619908547817687919877132923114994534423683988801542543173610304495470031726785887409581786396816431805986376370334594649335370360836100582336776046626523324708783365455450848115661616633847138656509879829983924350327425923278334782578477975317405663282407048098351120708240967746948293601074507720232803986594971651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eee7c59d6f481d17cbd74e3b6a020cafcfe0b6bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31a0b1845825a65c9bed304df50f87e4e706764b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.31082.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/EuropeanSSLServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/EuropeanSSLServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kusel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kusel.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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