rawe-hermetics.de

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:d8:1d:7e:62:ff:b0:1f:bf:2c:42:4d:53:c1:0f:b8 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rawe-hermetics.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:d8:1d:7e:62:ff:b0:1f:bf:2c:42:4d:53:c1:0f:b8
Serial Number (int): 15743642278343218834072352904257277880
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:77:c3:7b:e6:71:23:06:2e:67:fa:e5:3b:f9:aa:7b:45:df:c7:f6
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 67:22:1f:34:c2:14:89:87:01:fd:f0:90:6f:3a:f8:c6:08:0a:d6:73
Fingerprint (sha256): 2b:61:f3:ba:5e:db:61:13:05:14:8f:d4:93:c1:c4:2c:7b:1a:4c:de:d1:c1:c5:f4:87:82:96:3a:45:e4:ba:78

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate rawe-hermetics.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rawe-hermetics.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rawe-hermetics.de
www.rawe-hermetics.de
service.rawe-hermetics.de
portal.rawe-hermetics.de

Other certificates including the domain name rawe-hermetics.de

(limited to 100 certificates)
dashboard.megsol-intl.com
agenda.navego.mx
hr.web-ai.studio
people.tesseractesports.com
booking.simplicityis.co.za
myhrms.keaktephaenkar.com
team.theblaregroup.com
bookings.edwinmarie.com
hr.welhunt.com
myhrms.supermpower.com
booknow.radiantweb.co.za
people.generictechltd.com
hr.intellisystech.net
people.cititech.co.za
hrms.bostonlogix.com
booking.nousdine.com
agenda.navego.mx
hr.nari.ge
booking.princedigitalmedia.com
people.basic.am
agenda.navego.mx
my.dataeconomy.io
people.fajwah.com
books.crmexpert.co.il
klick.rawe-hermetics.de
agenda.navego.mx
employee.passportogo.co.il
people.sarisuki.com
client.lilmotors.co.ke
myhr.salubrify.in
mitarbeiter.rawe-hermetics.de
team.aat.team
calendar.allgoodmessages.com
agenda.navego.mx
hr.atc-portal.com
people.caliber.solutions
vendor.aalauddin.com
people.israelit.pro
bookings.dentalresidency.es
employee.passportogo.co.il
agenda.navego.mx
agenda.navego.mx
people.cititech.co.za
meet.arvindsa.com
booking.macexperience.com
people.basic.am
people.spreeloop.com
hr.web-ai.studio
agenda.navego.mx
customers.maritimess.com.br
hrms.brevitysoftware.com
bookings.keerki.com
booking.diamondstandard.co
myhrms.keaktephaenkar.com
people.tripleasolutions.com
book.biltmorepc.com
myaccount.legacysecurity.technology
rawe-hermetics.de
bookings.keerki.com
financas.addvalue.com.br
people.basic.am
booking.simplicityis.co.za
people.covalentrg.com
people.tesseractesports.com
people.basic.am
zoho.illumedia.net
people.yeastar.sg
people.tripleasolutions.com
people.unorthoboxed.com
rh.q14.plus
*.rawe-hermetics.de
rh.digiactif.fr
agenda.navego.mx
workit.birger.technology
time.argaocenter.com
people.basic.am
me.tapinad.com
schedule.stratusclear.com
meeting.luisdevillecpa.com
workit.birger.technology
people.covalentrg.com
hrms.resulticks.com
people.dupleit.com
people.generictechltd.com
rawe-hermetics.de
people.fajwah.com
hrms.examroom.ai
hr.atc-portal.com
billing.vonexta.com
meetings.whodo.vision
golf.rangemart.com
employee.passportogo.co.il
people.fidypay.com
rh.rawe-hermetics.de
booking.jesseboydlends.ca
calendar.allgoodmessages.com
booking.ascendmedical.com
hrms.examroom.ai
me.tapinad.com
people.basic.am

Certificate

The complete raw certificate details for rawe-hermetics.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+OxE3tiB/iYVfdBKjQc
tgyW0YU3h4gxNT11HQB523/Nf1PJf4sykJ1pKwXL6lFs//bTBkxKXVY6JgTlJyFK
VEDJdJIbNnQTKwyrlXX6yp5bfw+9D6s3tmTOYSIFxlXlGCEMZIa3bLSHBovwTyj+
BduSV4hKQyPiexBlQcBibvkSo4/wChKZZb56ylQZ15C2/DtuuiEhQvDGZ+IOk/HO
PaZlAu6cKA9OpoZs1h/XasUddezFycr8bq6SAJbnQ/9Lo0PBZlM2LTbmCMPuDLXa
8eSVqrE7qM7tQPfxLy38kQvTwQX5Rk33vL4CU8T2UTuiK7dM2eX8+1jFmp1eQfRH
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15743642278343218834072352904257277880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rawe-hermetics.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24728748432082013972121466256693273231921076444674476938856354394743938307837079836130351849075590000577958945346777342882164574336383413769501372996854001336043181329139703081936763271392764631395640965764903602406032567069959507802809465782205603927047157657449933327453228879510478521800563398521037827826294338556727667284824539820409986431468831660528635621270554931251781763345311912665664057159013289141242623846585333692526326957710768230099141742639174908917164427761985044568302949187365064140803484337803152266634598418931763806733417787019661448660406714903269714524794194489434514037671359130023446726567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f777c37be67123062e67fae53bf9aa7b45dfc7f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawe-hermetics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawe-hermetics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.rawe-hermetics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.rawe-hermetics.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000161a49894b4000004030047304502203d15811b202c9153a2c85ab8bbcbcd384a6bc7f679ef151443f3a01b41a37ba1022100afad90e9549c39369089a81c06a7cafe177f0a023bf5f4b1e1a10e9158c6a2390077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000161a49895370000040300483046022100fd1f141fa3f723a94ec22a14eeb82babc16f0bd28fe291928dd8b3e6ddfaca8a022100d2a528649dcc19738467bf2b5b6df9b4cc51516e5ad41c0af44c5693fc15a7ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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