*.c.jamitlabs.net

- Jamit Labs GmbH -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 24:d7:2e:c6:29:7d:06:86:8a:15:5c:f8:52:2a:f7:b9 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Jamit Labs GmbH

Organization: Jamit Labs GmbH
Organization unit: IT
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:d7:2e:c6:29:7d:06:86:8a:15:5c:f8:52:2a:f7:b9
Serial Number (int): 48969500363699937111988996708986714041
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 69:65:67:a7:e8:2b:21:de:68:7c:55:79:91:9f:8d:b0:bf:a2:f8:cf
Fingerprint (sha256): 2c:59:9d:f1:07:d2:2a:33:bc:a0:19:73:19:f1:69:fc:b2:8f:e4:c3:c8:ac:7f:96:d1:5c:c4:af:12:33:a8:c8

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.c.jamitlabs.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.c.jamitlabs.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.c.jamitlabs.net

Other certificates including the domain name jamitlabs.net

(limited to 100 certificates)
*.c.jamitlabs.net
admin.production0.schwabe.c.jamitlabs.net
gf.der-augenoptiker.de
production1.schwabe.c.jamitlabs.net
gf.der-augenoptiker.de
fitivo0.c.jamitlabs.net
cloud.jamitlabs.net
*.c.jamitlabs.net
resourceplanner.c.jamitlabs.net
production0.sonamedic.c.jamitlabs.net
fitivo0.c.jamitlabs.net
resourceplanner.c.jamitlabs.net
aluplaststaging.c.jamitlabs.net
pns.c.jamitlabs.net
appstore.jamitlabs.net
pns.c.jamitlabs.net
*.c.jamitlabs.net
pns.c.jamitlabs.net
*.c.jamitlabs.net
aluplast0.c.jamitlabs.net
resourceplanner.c.jamitlabs.net
gf.der-augenoptiker.de
bellin-banks.c.jamitlabs.net
production1.schwabe.c.jamitlabs.net
*.c.jamitlabs.net
production0.sonamedic.c.jamitlabs.net
edge0.sonamedic.c.jamitlabs.net
resourceplanner.c.jamitlabs.net
production1.schwabe.c.jamitlabs.net
production0.sonamedic.c.jamitlabs.net
cloud.jamitlabs.net
aluplastlive.c.jamitlabs.net
gf.der-augenoptiker.de
resourceplanner.c.jamitlabs.net
resourceplanner.c.jamitlabs.net
gf.der-augenoptiker.de
production0.sonamedic.c.jamitlabs.net
*.c.jamitlabs.net
production0.sonamedic.c.jamitlabs.net
admin.production0.schwabe.c.jamitlabs.net
resourceplanner.c.jamitlabs.net
cloud.jamitlabs.net
cloud.jamitlabs.net
resourceplanner.c.jamitlabs.net
gf.der-augenoptiker.de
git.jamitlabs.net
pns.c.jamitlabs.net
gf.der-augenoptiker.de
production1.meinekalkulation.zeiss.c.jamitlabs.net
resourceplanner.c.jamitlabs.net
gf.der-augenoptiker.de
cloud.jamitlabs.net
resourceplanner.c.jamitlabs.net
production0.sonamedic.c.jamitlabs.net
www.aluplast.staging0.c.jamitlabs.net
*.c.jamitlabs.net
pns.c.jamitlabs.net
aardvark.otto-chemie-production.c66.me
production0.sonamedic.c.jamitlabs.net
fitivo0.c.jamitlabs.net
mail.jamitlabs.net
neusehland.c.jamitlabs.net
phone.jamitlabs.net
gf.der-augenoptiker.de

Certificate

The complete raw certificate details for *.c.jamitlabs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Lz2XBROK6sF4qjfJ5h
kGBE7ZRA82r/B827t0U6a3IJqZWGc6wcAKos6UZUvhQVGq3F5SaHNORxDK85uiot
XLBM6ltRokZHJ7G3p7gFp62iOwY/bxNYEpjr/8isB2adbhdNcU+vcv8m18+aT2AW
HxlMZyZZD4xTguqn/X1fTHsRh5QZ7AS0zVZgf6vRaVb5YTO47mXlWrjOZdnYgMzk
N/4G2Z0XLtXywyeAS4dZxzfh1KTI4iMhHyohPFxVMlrjm+/K4/7Tjbzz6br5UtLN
hTAhddEHL7PuGG3Rgvjf/aukZlqDsavpUzUw1BwV/3suPCV0tZY4m5XL2/dZUVot
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48969500363699937111988996708986714041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Jamit Labs GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.c.jamitlabs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24720494041228731908863292408001322017735093468021945858058143105769886190233300327504269193435149609081620213360935548068226925187673697822654781653466100796225928719870548908236723321188381998100931753808698256461303861532671116631049265733526425538031567125939719304836186696293303315343151962399521302455304693006720922664392136390104422828179175753891205105864755943132331161613298553827264778599308541756893941079605732354286303696762261650736218413395398655103619002648711604919229092733627169240889379025683391022293505293309750058181641556488246330556425236946412447838577157482553253658191623018547588509079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c.jamitlabs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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