sva.mandant.dwd.de

- Deutscher Wetterdienst -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 61:7c:e7:4e:1d:f0:9c:f8:84:fd:b7:2b:19:8c:a2:cc was issued on by GEANT Vereniging.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
State / Province: Hessen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 61:7c:e7:4e:1d:f0:9c:f8:84:fd:b7:2b:19:8c:a2:cc
Serial Number (int): 129583651827276226701166723420916589260
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 76:d0:2d:78:bd:fc:36:61:cf:6f:dd:54:4d:05:dc:91:ca:51:36:ca
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 8a:a1:f4:a4:24:bb:57:f5:56:93:19:62:b5:99:29:b2:57:af:db:43
Fingerprint (sha256): 32:4f:86:1a:54:76:8b:42:dc:37:5b:80:b6:7b:cc:bc:b5:08:4a:e6:3c:24:cb:47:c1:b6:a6:29:ae:24:82:2b

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate sva.mandant.dwd.de

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sva.mandant.dwd.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sva.mandant.dwd.de
foerderfibel.bund.de
mobilitaetsforum-bund.bund.de
mobilitaetsforum-bund.de
mobilitaetsforum.bund.de
www.foerderfibel.bund.de
www.mobilitaetsforum-bund.bund.de
www.mobilitaetsforum-bund.de
www.mobilitaetsforum.bund.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for sva.mandant.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129583651827276226701166723420916589260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sva.mandant.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4055648687831228142855564933802773485219160525511248155022549564120610088030908591567834988997238324365366265155680704924399091989076019839802150977503207530090083715460400971476377325542142944144370564777620632597661032796868630801298944583284409245725722678032298363367942716241439921950121869472478767007662933830748829989119976593175543839632721740708418018086745436797815978673564512266278809554438815120868088221407133221975180943433618840595800014092965337737834323341217230081599546923715753591467121008104747538235016516656883084013783412998800005369385829233784420809093753309540742325592289154619656567104672316670255090778970620217635296555438709307867403185673400789366484127003839228761052635485424379827247697581858340527756921850560548198335823681924287703253794389481530329495158887267766462990000320582273962804540572640282687028014450842193958550464235474208919332939818998537696604441394214072176791605471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76d02d78bdfc3661cf6fdd544d05dc91ca5136ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sva.mandant.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foerderfibel.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilitaetsforum-bund.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilitaetsforum-bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilitaetsforum.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foerderfibel.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobilitaetsforum-bund.bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobilitaetsforum-bund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobilitaetsforum.bund.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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