foerderung.buendnisse-fuer-bildung.de

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 54:9b:db:f9:7c:d5:d8:64:25:44:2e:72 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foerderung.buendnisse-fuer-bildung.de,OU=Domain Control Validated,C=DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 54:9b:db:f9:7c:d5:d8:64:25:44:2e:72
Serial Number (int): 26185163127527609856317206130
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 89:b2:34:72:5d:2f:a5:bc:bc:f7:b5:e7:3b:47:ac:74:22:0a:f1:c6
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 62:dd:69:72:aa:9a:96:3e:40:95:7d:44:70:fd:5a:d7:9d:4e:f2:40
Fingerprint (sha256): 2f:dc:12:0a:e4:4a:7d:0f:d2:a1:97:89:2c:42:dc:c7:e3:8b:a8:88:3e:de:3b:88:32:81:9f:6f:da:ed:26:d8

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate foerderung.buendnisse-fuer-bildung.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foerderung.buendnisse-fuer-bildung.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foerderung.buendnisse-fuer-bildung.de

Other certificates including the domain name buendnisse-fuer-bildung.de

(limited to 100 certificates)
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
www.alphadekade.de
foerderung.buendnisse-fuer-bildung.de
www.alphadekade.de
www.buendnisse-fuer-bildung.de
www.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de
www.alphadekade.de
foerderung.buendnisse-fuer-bildung.de
foerderung.buendnisse-fuer-bildung.de
kumasta.buendnisse-fuer-bildung.de

Certificate

The complete raw certificate details for foerderung.buendnisse-fuer-bildung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ughMpRHz7Bxu0LvFJfn
aU1dELsj2fZS/Xh0RhTrefeUKPaAvgpa4FwsIqBbSZArjUGfik8zw7zYIBbshMFX
s1+O658qRa/gbCmldZdQDg99ZGnR7N9qfO+sNhwi3i9sQHhB+Tw4b5LPh6B1dvr2
1oyl8ssPQmo3X/Vfkj2JJk8Igh6tsZYCVxNE+bIzWEKt3/EES1WpyrCdov1PJDHA
eWfR1S/P2SuAJFcXDRUdZ/Brg6Jnz4Y1I0yBSpPECO1tWrkWFA8ARPagKCdVRxF3
bTIPpalAsqUOkIrBV8RYRdJn5QFCQKTsDfaSfDNsttECBPnHWXWh7K1lvX3ZA+72
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26185163127527609856317206130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-05 14:47:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-06 14:47:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foerderung.buendnisse-fuer-bildung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31169090432144674177311741583830934362036289613165436190067850910727660920080269926838514906840059142660767025801599314692097229794544450278459353592570005282932641933276871900975326500763593115338451099743544811719312558453362825534272146786278871347481685103049399213218748473883638763215938515116869942085607039201093169381157147985970759729817668710246030732524569373092919584934700460949939846250462306286642875903889068996362190846719064372899761661320606624531742423643456046511745014987489403734950981823228956607042073961727832333227929588404202386985128802704134656932200242320519022527902672949330431637081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foerderung.buendnisse-fuer-bildung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89b234725d2fa5bcbcf7b5e73b47ac74220af1c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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