ssl4.fioport.de

Issued by thawte DV SSL CA - G2

About this certificate

This digital certificate with serial number 3a:c0:c7:f4:59:3b:52:87:08:2b:ed:42:2d:8e:a8:00 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ssl4.fioport.de

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:c0:c7:f4:59:3b:52:87:08:2b:ed:42:2d:8e:a8:00
Serial Number (int): 78096200311162469918419247663500142592
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07

Fingerprint (sha1): 4c:fc:b4:59:90:27:a1:5f:bb:c3:ec:bc:b0:ca:77:df:97:ff:90:a9
Fingerprint (sha256): 2a:cf:89:23:bc:e2:49:43:84:56:65:f5:84:c7:1f:fb:a4:6f:83:18:49:50:5a:9b:02:ea:5c:19:35:dd:1a:66

Issuing Certificate URL: http://tn.symcb.com/tn.crt

Revocation information

OCSP Server: http://tn.symcd.com
CRL Distribution Point: http://tn.symcb.com/tn.crl

Check the revocation status for certificate ssl4.fioport.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl4.fioport.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl4.fioport.de

Other certificates including the domain name fioport.de

(limited to 100 certificates)
ssl.fioport.de
ssl2.fioport.de
*.fioport.de
*.fioport.de
ssl4.fioport.de
ssl.fioport.de
ssl4.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl3.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl5.fioport.de
ssl5.fioport.de
*.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl3.fioport.de
ssl5.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl2.fioport.de
ssl5.fioport.de
ssl2.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl5.fioport.de
ssl3.fioport.de
ssl5.fioport.de
ssl.fioport.de

Certificate

The complete raw certificate details for ssl4.fioport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlKsxdwoxg2NKBMOnxjp7
3SDSU3KI4/I5OlIV/C8gv2GOOHXd3xiHrU2pUcgUCAIrgpz4IqQTWk8sB3Tp5exd
AOMjjKK3QiCzJFAWpYe2SflHnlIOfponpe6NeyJYH2gOPqSpILM0ZPk/czBRpN7v
JlmZrUjBEaoOHfi7qO6YsOrp6fuiXLAiG239PQnS1JCUmIpa9kV+4YLohteROOYx
qQGjicl8oWozxj8Y04GefM6S890maJKlKBIWXadiwscnKMaXqgBiIVUg2E5JVgH0
Y+fo65CgCHDOm56x+v9jpmyfkztviZ6yiQFoPuNl/ipna5wvmxnbFymN3gtPzYOz
8e1TKu8dHY03HRrc6Gj3bXJdWP8hDGmowY/nQ1NIubch1DP17YJD5U/BehnCDtbD
Swjsl0Qp3DB7PQSMeRpxtTmxmkTkkVu0KnJdiQrhy96B6EtFM0C4PLWDxVIgDjqu
GbkiLnVOqZOejjGzovl1O4OdlhCC71acbq/6Xa8k27nrwoMAHdH2AMgR4DAqiNvE
bYeEhq+QtsWPmoB4E9voR75Dn7sUJjr0+hmKIXJ1zqJpKjedzBllggducNECqlCx
sIMQc9TPOu5yE9/+8f5CMa1Ep/pHm2WdGceKGdeYtjQj8wQ1dFEu29dOfA7AhDqN
VIjwqzru/KuwAvm2qrfy7l8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78096200311162469918419247663500142592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssl4.fioport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 606515476032929926862840093864137462946883565032476816274590879687096292483217581364039617834748521732997207017944017284266575310821701952145989312102619541159230405424240155523564492344902346331985586776950773217374453896897428465414147603065951080251700821605504362386634584450469512753777684592700334972951995606911783739509201245461037523382647141608253544881461368567702769053408527770893578405864871556737916045567468178861501954125413359583682603147809415444535661938188628943576649387552237594473854497376100478142377611270363477717794688035987215956954181343055014076601554298481837591174548383260459989910783721071716145199165677105297662399669414133563690374258784360207820826780518758635971821116107442843278305113335069860480630272045973829386607577923688095491289897346727131080797863090809654541323757029982737207594871039873803204926544287692188046645406929169323949184485793549494358003405355365627579589395232630654582432794105968636984245203460515421239495652598882735171814328545876847504004202587995400064404335843313766160687110297091079194305872009842228583150562563067288599518742863171280469627106336830322697602010195435673205077732320782526092554831124748710214805011147309472722527747764943100076335754847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl4.fioport.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015d501e18280000040300473045022100c82f3d8835a5d28ed443349b633e2b8e61e0c15df6273b67467afedfc0f57d5902205eda259b9b7633cce514bf48b824b4bc061448238a8291de7bd1ad85da00e988007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d501e185d0000040300473045022100b62f0231e55ad5513d450d4768d2925a66ac8c32ec8fa432f48fff78fc9295e802205d4412a49c695dc23fe8a31273d874a5899bf2bbb48c80c14c12fdaf95a3bf59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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