actosoft.de

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 01:3a:8b:e6:c1:24:eb:f8:55:74:f1:5f:87:35:91:3a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=actosoft.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3a:8b:e6:c1:24:eb:f8:55:74:f1:5f:87:35:91:3a
Serial Number (int): 1633218750767464300444692574293561658
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 66:9f:8d:67:97:0b:3a:27:d7:0a:7c:22:42:1b:fe:57:44:99:56:53
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 11:d0:98:f8:c6:33:9c:87:20:45:b4:22:17:4e:02:47:29:02:a7:aa
Fingerprint (sha256): 30:34:59:5f:69:f0:32:41:24:85:72:10:e4:38:7a:e1:cd:b0:eb:31:ac:05:97:d7:a3:a6:6c:fa:d6:f0:22:3f

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate actosoft.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for actosoft.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actosoft.de
www.actosoft.de

Other certificates including the domain name actosoft.de

(limited to 100 certificates)
support.mytimezero.com
support.mytimezero.com
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
fdus-24b.freshdesk.com
blog.actosoft.de
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
actosoft.de
support.mytimezero.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
support.mytimezero.com
*.actosoft.de
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
actosoft.de
actosoft.de
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
assist.pentest.partners
fdus-24b.freshdesk.com
support.mytimezero.com
fdus-24b.freshdesk.com
helpdesk.actosoft.de
support.mytimezero.com
assist.pentest.partners
fdus-24b.freshdesk.com
support.mytimezero.com
fdus-24b.freshdesk.com
helpdesk.actosoft.de
*.actosoft.de
support.mytimezero.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
support.mytimezero.com
support.mytimezero.com
fdus-24b.freshdesk.com
static.actosoft.de
fdus-24b.freshdesk.com
actosoft.de
helpdesk.coulisse.com
fdus-24b.freshdesk.com
support.mytimezero.com
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
assist.pentest.partners
support.mytimezero.com
fdus-24b.freshdesk.com
support.mytimezero.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
sdp.vdp.com
support.mytimezero.com
support.mytimezero.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
assist.pentest.partners
blog.actosoft.de
*.actosoft.de
*.actosoft.de
fdus-24b.freshdesk.com
static.actosoft.de
fdus-24b.freshdesk.com
support.mytimezero.com
ithelpdesk.archlynk.com
fdus-24b.freshdesk.com
helpdesk.saviaantjes.be
ithelpdesk.archlynk.com
ithelpdesk.archlynk.com
*.actosoft.de
actosoft.de
fdus-24b.freshdesk.com
assist.pentest.partners
support.mytimezero.com
support.mytimezero.com
fdus-24b.freshdesk.com
support.mytimezero.com
fdus-24b.freshdesk.com
fdus-24b.freshdesk.com
ithelpdesk.archlynk.com
actosoft.de
support.mytimezero.com
assist.pentest.partners
sdp.vdp.com
fdus-24b.freshdesk.com
assist.pentest.partners
static.actosoft.de
*.actosoft.de
*.actosoft.de
fdus-24b.freshdesk.com
support.mytimezero.com
helpdesk.wentworthclub.com
support.mytimezero.com

Certificate

The complete raw certificate details for actosoft.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSJRrBigAINXACT7/x3I
E06r25eYPg3bWs5FuynU123qJYDENsN50LKaqIxEaV3jIbTlbF52luP0+3TwLeWW
uve5OL/yFN9bdzpLt/mBibrduSOnqMur02wbTign1MbRMhqkuSaQVd5flbEpR0/O
/lyNlvgWGhBBV/bdxIuqNNenyHdsHqLEvqHo89D4GCtYeWJ8eBImvZmrHXU/kUp4
IFGbghpBkYaK/0PjZDTx9AGpg1tacNcYatCK4ml7q0QYMqM2brWy5SYBbeZmUXWz
ewdgltONE+0BSWkMTMpP4gd4C3zUJpjafqUgHhd5A/fopDa3djSS//CQd3cYZ6WN
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1633218750767464300444692574293561658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'actosoft.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22361103324526460300579030952075101459332618011536375168810241639195048506796795738736870713663803296422308202612688865883310371203213144838843949665553458559548367569501601491748532759610707247345459658949460076254346489648752088199755140286824318559349685943028881040146486128135331269454034227445952726774543824817372479657376564003440276488507674876076638280703364850830193017768118393428314915440348624512460575735978322896725183264233061517940636117597402555066519730565498907244862649359119090359820151676440061697806682980392038520689137956673203787675045691646134255387974692980866631948109003261117439774153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							669f8d67970b3a27d70a7c22421bfe5744995653
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actosoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actosoft.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001695ce0e2a900000403004830460221009ae6d4105c4ad282af667c649054371adaf2642912a792d9e6350aad5898dd38022100db7da1c131403bef6c14e659bbd1a291c5bd2a97aa1ae1ab3cf6dee753f9a3d40076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001695ce0e2c3000004030047304502201d4dcca48ee044af02f232624b957fbd6f7f06415818845134f7f9d7842f1c33022100dc1c6561bf4c9f9e02913f3b797ffccf6d42f0e4d05303d090ad06488c5f687f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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