*.bogestra.de

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:e2:e4:60:8e:ef:6c:5b:27:b5:a0:b0:24:29:32:65 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.bogestra.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:e2:e4:60:8e:ef:6c:5b:27:b5:a0:b0:24:29:32:65
Serial Number (int): 14470371087407580085933158304290779749
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5b:ae:88:8d:96:eb:68:b2:ad:32:d2:a8:5d:2a:ba:d7:1f:4a:2e:82
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): a9:cf:8e:e0:6c:43:fa:d0:be:f6:9f:4d:9f:d8:06:b2:a8:06:11:3b
Fingerprint (sha256): 2d:fe:2c:13:29:a6:41:e2:5f:32:1a:c0:ba:c1:a4:58:01:3a:fb:8a:e8:95:20:34:5b:bd:fe:15:31:47:86:e1

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.bogestra.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bogestra.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bogestra.de
bogestra.de

Other certificates including the domain name bogestra.de

(limited to 100 certificates)
*.bogestra.de
www.bogestra.de
webdav.bogestra.de
mobile.bogestra.de
bogestra.de
*.bogestra.de
intranet.bogestra.de
bogestra.de
*.bogestra.de
*.bogestra.de
mobile.bogestra.de
intranet.bogestra.de
bogestra.de
webcomm.bogestra.de
mobile.bogestra.de
boge.bogestra.de
intranet.bogestra.de
*.bogestra.de
bogestra.de
jobs.bogestra.de
webcomm.bogestra.de
jobs.bogestra.de
*.bogestra.de
jobs.bogestra.de
*.bogestra.de
intranet.bogestra.de
intranet.bogestra.de
*.bogestra.de
jobs.bogestra.de
elearning.bogestra.de
elearning.bogestra.de
jobs.bogestra.de
*.bogestra.de
elearning.bogestra.de
bogestra.de
intranet.bogestra.de
webdav.bogestra.de
elearning.bogestra.de
intranet.bogestra.de
intranet.bogestra.de
jobs.bogestra.de
jobs.bogestra.de
bogestra.de
jobs.bogestra.de
bogestra.de
*.bogestra.de
www.bogestra.de
*.bogestra.de
bogestra.de
mdm.bogestra.de

Certificate

The complete raw certificate details for *.bogestra.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwxvPkpimd2dpoCJfxdC
VhHQQIM2vKR/0jhKm/niFblPS8tqztU4ij3sLsZdQ1caX5FnozrBEXc/RX4DjVAW
sLuq+RmD6dKPlxuXMKoqTjcqNXAiyPQKDYDerUlTiLNUUP40630ZRGGwhS7LokFH
6HaJmvKtFq4VdlLdcPdQDJGI8/JWonbYRCleJV6gYJ6lEg0zwzBIt4RgmPqO5YFJ
U0YIW+JtkMtmOLZou9oKR0MIPnkA2mnQX1p5neAQcXAdyn+KH+jRQ3oXvdJ7QyFc
S11fb1AMrsy2NpvcPgf22SUOrip74KxN2OVU3E6r2F8si9f/WtbHiqsD8f3I3xLa
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14470371087407580085933158304290779749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bogestra.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21087928631622597910201022096372151891218640398907191799448418717436267956268186932939773477759203343950083138066838774416523000179505313010034108295915273695396284068007813431098261197328918305310715601592870741199742616110032333484446644234358897817940549753275953031771668029621173105692762655268455205206613111765978973063772303672066724756696385042762284983078317128453178373073964301093986243437534018720390020742142580066580811054413469451348666141175528410638292733899807723388998363577096792344384840731860498466875189806355940846953804808142865192212481955326933489967093884159245937318356865525415052237531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bae888d96eb68b2ad32d2a85d2abad71f4a2e82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bogestra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogestra.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a5fb0693f00000403004730450220137c27f4773c9e623d604e9e65203e4a036c63d8fb57bc065f77ec74fb829a82022100929aa0f74d45f405875abeaa42508081ac139b2da3b8ed9fb22331e3ee4638ec00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a5fb067810000040300473045022100adc2be163126e9ba609b835b5a4fe4e3cf9d6b528365325196489511a190d96b02207df14b5152fc18ad1f6a1aedf5038db26360e9d86ddd0e5a5a24cb41cfb8c234007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a5fb067450000040300463044022057bf3188b29c16d67295e3f6c5cbce1c0d7b49020e66b961aac07d602c85da1702202bf0ecf55140db4c2e5d74adb154c772b26ef84d4707b74aac483f3a7d168714
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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