OV SSL/TLS Certificate for tarifrechner.vhv.de Issued to VHV digital development GmbH

Certificate is witin its validity period

Issued by DigiCert Inc (GeoTrust TLS RSA CA G1)

About the tarifrechner.vhv.de OV SSL/TLS Certificate

This certificate with serial number 08:80:fd:79:6d:93:6b:a7:16:28:48:ae:81:fe:66:b3 for tarifrechner.vhv.de was issued on by DigiCert Inc.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for tarifrechner.vhv.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 08:80:fd:79:6d:93:6b:a7:16:28:48:ae:81:fe:66:b3
Serial Number (int): 11303579034321259559710963809237493427
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: ea:5f:3d:12:b6:06:06:b6:bb:25:a0:f9:9c:de:17:6e:86:d0:b3:8d
Authority Key Identifier: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (SHA-1): 80:11:97:4b:54:38:d3:6e:b1:c9:08:ce:2f:48:ac:cb:95:74:86:75
Fingerprint (SHA-256): d6:d7:08:0e:73:4d:33:20:ac:46:c5:60:99:e5:a7:4e:be:88:ef:8b:d4:f0:bd:12:04:7d:9c:d9:63:62:13:34

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate tarifrechner.vhv.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for tarifrechner.vhv.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for tarifrechner.vhv.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11303579034321259559710963809237493427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VHV digital development GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tarifrechner.vhv.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700259498896244346336157519957235116145828732346433398544367177647279817173861217587862081926517776280572780930641011980672665976341145950927884619112611675279744934168815388105812921684742452156374296455079518967545039225276114129955427571489294232405991206463257715524482205645617370119671379250441333849944095069315631565243151196902497860375344563922134728086003005264460479634418695483613877226179059265641257587818255674987700894328993614887464506768155701469965193856344185458738607622065199770696435991292893194282128090020663662571877057810367615377896569686752770946793965705681854231647023020793001644038852160602871715252971962073998813924083365410939731285567475959704227289631181439820009093867331240503553164832561484269437048633181033563299165614623444348465854635732744063986782528861523227560122659951395950196822343745554270851096654644711396805067222117099473448712886522368869991418914130974320622088244869532697598593039902257349479658572085048437411324155290301909703694804853988095221687034528877677611799533996113861558007606150895385756584103083424474768354751665147010213508288096049049966234088395538173625779381974464333288383621956546663502882594973430894927769801962037330256056813445102441639034734133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea5f3d12b60606b6bb25a0f99cde176e86d0b38d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarifrechner.vhv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tarifrechner.vhv.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c4c3349a7baff07bd2f740e93fa4fbce3ec1e73b271724250a597599ef337c674b91d8dde207e453efa6d312d395c35828277454c18713f488b17d8bbc7f9302b7e054287010dc354b29f886cde98184c8273a8cd58ae93c1ae4136d6bb9cd42d0c9d57304c10b7c052927d3b92087daca6993f3d0fb7ba9b8a385cc8201a201104b1d49da6bf04d9d1c440ec030bbef1b9dd4188b4dfe8cca1a8aac62c0be72490309eee91f0be9d7aa3732b99fda22ee5c99f37976c053e49549582d45dfe100d145f29bdde6fd6807f0f153f497b4f3fef32cf666c1cbc7c1c4748e62e55d07ada807dddd8c59623458e21752cf84c95c46dfb34d9d409e46d5c0d5e9868