*.funkemedien.de

- FUNKE Services GmbH -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 0e:16:d0:e5:da:49:cb:ee:f3:e2:f5:34:d2:1e:70:3a:22:61:61:69 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

FUNKE Services GmbH

Organization: FUNKE Services GmbH
State / Province: NW
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:16:d0:e5:da:49:cb:ee:f3:e2:f5:34:d2:1e:70:3a:22:61:61:69
Serial Number (int): 80434684756192135087304585944952109369661677929
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 14:56:e4:5e:0c:a0:01:d1:71:39:de:b0:fa:d3:8b:72:d4:eb:71:d6
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 55:9b:54:5a:21:71:97:6e:2f:1b:d4:ff:7f:1b:c0:2d:a3:a7:0a:75
Fingerprint (sha256): 2a:00:7d:70:1b:b9:b0:d1:e2:48:57:1b:e6:d7:33:43:8c:52:63:32:30:2e:17:ef:c6:41:b0:1c:5f:d2:ee:cd

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate *.funkemedien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.funkemedien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.funkemedien.de
funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for *.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XPhBXTpUC9X5xy8h7Kp
WNi8aGvmzaPPsr2OeLjJKbxAU2xAdVVjNt27A+c9pERnhrT404kO9wLpw/3twnnL
8NL3wfZoBBXkIl0fVwu4RQcSyWDx2sYVBqJS8Bdgi8CvzatN0OSmj/pS+gIq00Ta
X4Xm86C2umglTfgSToY9ielxV3wkw8tUJNQGfgPlH/bw+VxT6oyj+hdpXcx/azGP
90FNNwvLobfRYD7/kfFxaGMEWt5GmZJnMK1gN1l2RrU0BopHGiopcAf/itMdmQ15
wKtazilvVAOE7yrTSjmPjdKmez6f6zMI5J0jrDkhEEdQtnUu8jHqakp+X4puk6gi
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80434684756192135087304585944952109369661677929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 07:18:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-28 07:18:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FUNKE Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26945901017212775175369950521924943980653679350174291903053629197719076664195687915738712449791871827368697465788502721590932602626169476777512216469502378274469465758131081699910429616657570157059489929746059488033391028688203772933908290533882613370302226388369105294472064230700768267532647293019975752691955432901189748331821189628442055417477150461402303060273816041582565362223452576533244613770381826864349442569857130802786379899121134979308822739831450219560650528849581496788530969255575759752376218465164726495351811993170395785787000177784515253060094436060218632916402137905549328818856865423177479103013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1456e45e0ca001d17139deb0fad38b72d4eb71d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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