www.seifert-medien.de

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 0c:75:cc:9f:ac:eb:62:65:39:ba:36:68:7a:ad:cd:15 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.seifert-medien.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:75:cc:9f:ac:eb:62:65:39:ba:36:68:7a:ad:cd:15
Serial Number (int): 16562384944220533932256874781440068885
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:1b:ea:ec:d4:9b:7b:7b:f5:ee:45:62:20:49:af:df:d1:3e:c5:80
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): ce:1c:22:a3:e3:f2:9c:9a:f8:7a:62:b0:4f:ff:47:0e:da:55:2c:29
Fingerprint (sha256): 2f:97:b9:1e:38:f2:88:87:b0:df:ec:9e:6a:50:a4:f5:cc:88:2a:01:ad:4a:56:cc:62:b4:54:ee:28:b5:18:2b

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate www.seifert-medien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.seifert-medien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.seifert-medien.de
seifert-medien.de

Other certificates including the domain name seifert-medien.de

(limited to 100 certificates)
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
tagesspiegel.kiosk.plus
kiosk.dolcevita-magazin.ch
mitteilungsblatt.seifert-medien.de
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
www.seifert-medien.de
kiosk.vidaglobal.de
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
magazine.montana-cans.com
kiosk.am-weststrand.com
media.hirschmann-automotive.com
publications.cwgc.org
magazine.montana-cans.com
www.seifert-medien.de
magazine.legacylighthouse.org
moegro.mediaflip.de
kiosk.der-kleine-georg.de
www.maryspubs.com
webkiosk.magazinmarley.de
downloads.yspi.ie
digital.queencityconnections.com
magazine.legacylighthouse.org
angebote.dersteirerhof.at
kiosk.vidaglobal.de
magazine.biss.team
read.africanphotomag.co.ke
kiosk.der-kleine-georg.de
katalog.seglerbedarf.de
quals.truebeck.com
www.digital.britishtraveljournal.com
kiosk.leuchtfeuer-verlag.com
kiosk.vidaglobal.de
kataloge.triplex-fischer.de
magazin.tellz.me
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
epaper.sinntec.de
kiosk.vidaglobal.de
digital.queencityconnections.com
quals.truebeck.com
emag.indianjeweller.in
katalog.hltravel.at
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
immomagazin.wegenerimmobilien.de
magazine.legacylighthouse.org
webkiosk.edeka-koehne.de
kataloge.otto-pokale.de
webkiosk.magazinmarley.de
magazine.roarkidsmagazine.com
brochures.adipec.com
kiosk.vidaglobal.de
catalogs.k7-pro.com
logo-moebel.mediaflip.de
news.vdmno.de
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
www.seifert-medien.de
kiosk.vidaglobal.de
mitteilungsblatt.seifert-medien.de
digital.queencityconnections.com
publikationen.contipark.de
magazine.elektropraktiker.de
magazine.biss.team
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
brochures.hts-touristik.de
kataloge.werbeartikel-laeser.ch
magazine.legacylighthouse.org
magazine.biss.team
magazine.biss.team
ebooks.teammelanie.nz
magazine.legacylighthouse.org
publications.cwgc.org
webkiosk.werk5.ch
webkiosk.lurkoi.com
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
brochure.ntpwarranty.com
wirbeicontipark.contipark.de
magazine.biss.team
read.africanphotomag.co.ke
mitteilungsblatt.seifert-medien.de
magazine.cioa.com
moebel-seesen.mediaflip.de
kataloge.weilermoebel.at

Certificate

The complete raw certificate details for www.seifert-medien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66ulHKl+a8LF2Y8Vq34b
97G4S8tH0b2Y776P+9/p18QZzDMUGjxDroNa5nvkJV18H+sYyJXvjU7CG8mxdmeL
UbF/zm52yqysbVpO7QNkLgdQG4m/kdau6a/pr32md0Z4PC8X/+X5j6dGeksbIL4g
5NPYNBQBgIEePVi2QTeFj6I4x8yFZ+V45L9A3xicHLICorh9+av1cxN5qjiHViUA
csYek+JL93QfBisDsIrfKFLDMsw17UbbsYx93Y7bI2f+jYd0pjG6rrwySF/ZIDun
CAZ+uyCervD2YLzn9IKIKhQ0JSCUmhFEO46/0ZmpOh5UmeKL+vRdKqQs1pPmYbGr
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16562384944220533932256874781440068885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.seifert-medien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29750642955663830671829699498920490050313410583475607802645025662242950181301434194340107093350058169366664377341489836214881920456167840268145633606157101626448763021814920772283892463678933786033198138667049916035390314103873944723489611868610401756261210801396308775924345379321283337450648048411402077923678939631179194029093792170289721693591767023226583676411254739594895689578974831861318778250042563857763256670401499116619046475379839475414467771536951039068375990712760784741647853661641119721320499639611038307863349942873337488032198044771095290838713432354331963433403290717921218822492803295175840476061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							841beaecd49b7b7bf5ee45622049afdfd13ec580
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seifert-medien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seifert-medien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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