www.krombacher.de

- KROMBACHER BRAUEREI Bernhard Schadeberg GmbH & Co. KG -

Issued by Deutsche Telekom CA 5

About this certificate

This digital certificate with serial number 87:9e was issued on by T-Systems Enterprise Services GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

KROMBACHER BRAUEREI Bernhard Schadeberg GmbH & Co. KG

Organization: KROMBACHER BRAUEREI Bernhard Schadeberg GmbH & Co. KG
State / Province: NRW
Locality: Kreuztal-Krombach
Country: DE

T-Systems Enterprise Services GmbH

Organization: T-Systems Enterprise Services GmbH
Organization unit: Trust Center Deutsche Telekom
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 87:9e
Serial Number (int): 34718
Serial Number lenght: 16 bits, 2 octets

SubjectKeyId: e1:6f:33:bb:7f:e0:12:f3:08:69:dc:2c:a6:9b:3d:e8:b1:07:80:c4
AuthorityKeyId: b3:f5:5f:a6:02:3c:23:10:5b:71:a1:7c:b3:a7:40:85:a8:85:26:b8

Fingerprint (sha1): ea:35:13:e5:26:ee:95:3a:ad:ae:ff:d4:83:7a:96:ff:eb:b8:ad:9e
Fingerprint (sha256): 2c:1b:fa:60:ec:9d:f5:34:2c:55:e9:de:25:09:36:27:bf:f4:ee:4c:78:7f:80:75:5d:9b:34:5c:d7:7e:34:61


Revocation information

CRL Distribution Point: http://wwwca.telesec.de/cgi-bin/Pub_Cert/ServPass/DwnloadCRL.crl?-issuer_dn=Deutsche_Telekom_CA_5
CRL Distribution Point: ldap://ldap-serverpass.telesec.de/cn=Deutsche%20Telekom%20CA%205,ou=Trust%20Center%20Deutsche%20Telekom,o=T-Systems%20Enterprise%20Services%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*

Check the revocation status for certificate www.krombacher.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.krombacher.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.krombacher.de

Other certificates including the domain name krombacher.de

(limited to 100 certificates)
magazine.kueche-co.de
magazin.rollstuhlsport.de
magazine.kueche-co.de
webkiosk.con-nexi.de
magazine.kueche-co.de
epaper.krombacher.de
magazine.kueche-co.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
kiosk.laloupe.com
kiosk.miles-magazine.be
krombacher.de
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.miles-magazine.be
kiosk.laloupe.com
magazine.kueche-co.de
magazine.kueche-co.de
presseservice.krombacher.de
epaper.immosale24.net
kiosk.laloupe.com
kiosk.laloupe.com
kiosk.laloupe.com
magazin.rollstuhlsport.de
epaper.krombacher.de
magazine.kueche-co.de
magazine.kueche-co.de
epaper.immosale24.net
epaper.krombacher.de
mx1.krombacher.de
magazine.kueche-co.de
pachtvermittlung.krombacher.de
magazin.rollstuhlsport.de
webkiosk.con-nexi.de
magazine.kueche-co.de
magazine.kueche-co.de
1855896918.rsc.cdn77.org
1855896918.rsc.cdn77.org
kiosk.miles-magazine.be
magazine.kueche-co.de
magazine.kueche-co.de
magazine.kueche-co.de
magazine.kueche-co.de
kiosk.laloupe.com
kiosk.miles-magazine.be
magazine.kueche-co.de
magazin.rollstuhlsport.de
magazine.kueche-co.de
servicepartner.krombacher.de
epaper.krombacher.de
epaper.krombacher.de
kiosk.miles-magazine.be
magazin.rollstuhlsport.de
magazine.kueche-co.de
1855896918.rsc.cdn77.org
webkiosk.con-nexi.de
qr.krombacher.de
kiosk.miles-magazine.be
kiosk.laloupe.com
kiosk.laloupe.com
magazine.kueche-co.de
kiosk.laloupe.com
kiosk.miles-magazine.be
magazine.kueche-co.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
cashkorken.krombacher.de
webkiosk.con-nexi.de
kiosk.miles-magazine.be
kiosk.laloupe.com
magazine.kueche-co.de
m.krombacher.de
magazine.kueche-co.de
kiosk.laloupe.com
kiosk.laloupe.com
epaper.immosale24.net
*.krombacher.de
magazin.rollstuhlsport.de
kiosk.miles-magazine.be
epaper.immosale24.net
kiosk.miles-magazine.be
kiosk.laloupe.com
magazine.kueche-co.de
magazine.kueche-co.de
webkiosk.con-nexi.de
servicepartner.krombacher.de
magazine.kueche-co.de
kiosk.laloupe.com
www.krombacher.de
webkiosk.con-nexi.de
kiosk.miles-magazine.be
shop.krombacher.de
kiosk.miles-magazine.be
webkiosk.con-nexi.de
kiosk.miles-magazine.be
kiosk.miles-magazine.be
webkiosk.vedes.de
magazin.rollstuhlsport.de
epaper.immosale24.net
magazine.kueche-co.de

Certificate

The complete raw certificate details for www.krombacher.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvw7HdyV9ITkRvvhwoSx
tx7x/I7oiakHLNrgRP9pOYyyw8yQR915qgBKxFcMbL/DIHfaKEa2mNDU1YHsrZXQ
R3B0VjUXeg7DOU/MxWoludeEqatgKH3iYs+kTUhsnwExlgjpMggV95SnbdJ+4BoF
pWzPU2kqgAf+y25J/BI5xcB1o+PrRJIhBEd9bYE20mU/IFyunc4XNBt+VKQGzh0d
H2mKJJoHvjmK7XegFA/Hyi4prWfRWWinQ0lOW17khFqJyRz4TBMUM6NEf1+piVIZ
GdnMmmSJnCRf7DeE9TUd0aDWOPzDJeke4H0JcpzK8gzdEy/Wfx6y+nFF55crSwB4
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems Enterprise Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Center Deutsche Telekom'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Telekom CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-03-05 08:05:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-10 08:05:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'KROMBACHER BRAUEREI Bernhard Schadeberg GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kreuztal-Krombach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.krombacher.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24614610867933473968914540218992772006388916864321565502757241551667461038897572951937566528293470928646211237063104918737602183648858351651955990765111184608929694947847925673935257786679868993299826077256757745808566652207704409702783361804288445247507506252659312463616962061131066638278973704852175508928951307436720193920343294289465162776508691247439307074178097406015116610813779457646512033427033143192546636525981653520547204571387207306271140336588780259260307385041072396315721369876313740389924103862020958747499974590929209597254521801072703700730445063645024201144061210162915943243052631207176547891421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b3f55fa6023c23105b71a17cb3a74085a88526b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e16f33bb7fe012f30869dc2ca69b3de8b10780c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://wwwca.telesec.de/Pub_Cert/ServPass/cps/CPS_ServerPass_V34.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://wwwca.telesec.de/cgi-bin/Pub_Cert/ServPass/DwnloadCRL.crl?-issuer_dn=Deutsche_Telekom_CA_5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap-serverpass.telesec.de/cn=Deutsche%20Telekom%20CA%205,ou=Trust%20Center%20Deutsche%20Telekom,o=T-Systems%20Enterprise%20Services%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krombacher.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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