mail.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 49:c0:17:c3:c2:60:b9:cc:45:8d:24:8d:26:ea:ac:c1:62:4f:49:fb was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 49:c0:17:c3:c2:60:b9:cc:45:8d:24:8d:26:ea:ac:c1:62:4f:49:fb
Serial Number (int): 421040139544268605091407556787195883165873818107
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: e8:5e:5b:af:cb:ae:a6:af:5b:7a:d7:99:fb:ca:25:95:1c:35:cc:02
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 9e:f4:32:54:ae:18:61:db:ef:cf:02:5c:73:6a:16:8b:0d:9e:21:5f
Fingerprint (sha256): 2b:d5:29:57:38:0e:b7:22:5c:05:65:78:cb:19:34:86:80:e5:dd:7d:db:e0:fb:db:3e:49:35:6f:5e:16:92:36

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate mail.funkemedien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.funkemedien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.funkemedien.de
autodiscover.funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for mail.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hCfjKJ1pAmvhocBvbGW
So3j5zfjtObv4lNGKuJ32YsXf+pHmbgJ3gy9VcLSNKsEcWKf+vhLg+Kb261XKkGd
Za/VhrB1eJN8AR/i71XGEbq+YR/J0cI18JxJL8S04Dtd+8lRTD1Z16PWvrLCVrQx
Wv2TQj0EuD9nXYmhHf2K9d799Prbiks560N4tOjE0kWZ0qt6hcQw4oLVKFKL1JFs
++Jv23Wy644WuDsOxstxKaLC5zWaSwg1wiI+ytXyU90Xqrzh1KhmY72YUlFQvX3M
USyFAr+eLkgAx7RR4TXQmu4nCuIkGdZwJ4n/KoYJ9ZE6v+igouQHBlsy5WVZthqs
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421040139544268605091407556787195883165873818107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-10 08:50:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 08:50:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29043007367186467997128083078832688020168964312313819407741895964938276185377974867736042392919736460787891492256364097105129873768703957644730556035034656460091788682698848259585281231427909754373878252698239990941066882160179320893733025951033033102449882148740355744817719522734717060104814596380853664077038037449437876906408143153512104624690437822133787121394853764529754957297753190493183916063853641629689722353987073010817762738664563027353887486330235088395092464832429612641608852697493679790559349619058859562305578400417789839706246548302979199044870119738436714795466366170482521916959733233059096079433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e85e5bafcbaea6af5b7ad799fbca25951c35cc02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (728 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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